A network security administrator is performing a compliance audit on an enterprise wireless infrastructure. Match each wireless security standard configuration on the left to its mandatory encryption algorithm and cryptographic authentication mechanism on the right.
- WPA3-Enterprise (192-bit Security Mode)GCMP-256 cipher suite with EAP-TLS authentication and BIP-GMAC-256
- WPA3-PersonalCCMP-128 (AES) encryption with Simultaneous Authentication of Equals (SAE)
- WPA2-EnterpriseCCMP (AES-128) encryption with 802.1X/RADIUS authentication
- WPA-Personal (Legacy)TKIP stream cipher with Per-Packet Keying and Pre-Shared Key (PSK)
Cevap
WPA3-Enterprise (192-bit Security Mode) matches GCMP-256 with EAP-TLS and BIP-GMAC-256; WPA3-Personal matches CCMP-128 with SAE; WPA2-Enterprise matches CCMP with 802.1X/RADIUS; WPA-Personal (Legacy) matches TKIP with PSK.
Each wireless security standard defines strict baseline requirements for encryption ciphers and key exchange mechanisms. WPA3 192-bit mode enforces GCMP-256 and EAP-TLS for maximum security compliance. WPA3-Personal mandates SAE to prevent offline brute-force attacks. WPA2-Enterprise mandates CCMP (AES-128) paired with 802.1X central RADIUS authentication. Legacy WPA utilizes TKIP to wrap RC4 for backwards compatibility.
Adım Adım Çözüm
Anahtar Kavram
Mapping IEEE 802.11 security standards (WPA, WPA2, WPA3) to their mandatory encryption algorithms (TKIP, CCMP, GCMP) and authentication methods (PSK, 802.1X/RADIUS, SAE).