Examkin

Soru

Zorluk: ZorWireless Security Standards and Encryption Protocols

A system architect is upgrading a research organization's WLAN infrastructure to protect sensitive data transfers. The security policy mandates centralized per-user authentication integrated with an identity provider, mutual authentication between clients and RADIUS servers, and resistance against credential theft via offline dictionary attacks. Which of the following technical requirements and protocol implementations must be selected to satisfy this policy? (Select TWO.)

  1. Implementation of WPA3-Enterprise mode operating with 802.1X framework for centralized identity managementCevap
  2. Deployment of Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) using X.509 digital certificatesCevap
  3. C
    Configuration of WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE) with a shared complex passphrase
  4. D
    Use of Protected EAP with MS-CHAPv2 (PEAP-MSCHAPv2) configured with static WEP keys for legacy client compatibility

Cevap

The organization must implement WPA3-Enterprise mode with 802.1X and deploy EAP-TLS authentication with digital certificates.
WPA3-Enterprise enforces the 802.1X port-based network access control framework, allowing user authentication against centralized directory services like Active Directory via RADIUS. Combining this with EAP-TLS delivers mutual authentication through X.509 digital certificates, ensuring both client and network identity are validated while rendering offline dictionary attacks ineffective.

Adım Adım Çözüm

1
Analyze the identity and authentication requirements
Centralized per-user authentication requires an 802.1X framework and RADIUS server, which is provided by WPA3-Enterprise rather than pre-shared key modes.
WPA3-Personal relies on a single shared secret across clients, whereas WPA3-Enterprise delegates authentication to a central directory service.
2
Evaluate protocol mechanisms for mutual authentication and dictionary attack prevention
EAP-TLS mandates asymmetric cryptography with PKI certificates on both client and server sides.
By eliminating password-only authentication exchanges, EAP-TLS provides robust mutual authentication and prevents offline dictionary attacks against user credentials.

Anahtar Kavram

WPA3-Enterprise Architecture and EAP-TLS Mutual Authentication
Bu soruyu puanla

Konular

Wireless Security Standards and Encryption Protocols

Bu konudan daha fazla soru