Soru

Zorluk: ZorWireless Security Standards and Encryption Protocols

A network technician is configuring a secure wireless network for a regional field office. Management mandates enhancing security beyond WPA2-Personal to protect against offline dictionary attacks and wireless management frame spoofing, but the site lacks the infrastructure required for centralized RADIUS authentication. Which TWO of the following features or protocols must be implemented to fulfill these requirements under WPA3-Personal?

  1. Simultaneous Authentication of Equals (SAE) to replace the legacy pre-shared key handshake and defend against offline dictionary attacksCevap
  2. Mandatory integration of Protected Management Frames (PMF / IEEE 802.11w) to safeguard unicast and multicast management traffic against spoofingCevap
  3. C
    Deployment of an IEEE 802.1X framework with EAP-TLS authentication requiring central RADIUS servers and individual client certificates
  4. D
    Centralized credential validation via RADIUS to encrypt the entire 802.11 wireless frame payload and decouple authentication from authorization

Cevap

Simultaneous Authentication of Equals (SAE) and mandatory Protected Management Frames (PMF / IEEE 802.11w) must be implemented for WPA3-Personal.
WPA3-Personal enhances wireless security by introducing Simultaneous Authentication of Equals (SAE) to eliminate vulnerability to offline dictionary attacks without requiring a RADIUS infrastructure. Additionally, WPA3 makes Protected Management Frames (PMF / IEEE 802.11w) mandatory to protect wireless management traffic from deauthentication spoofing.

Adım Adım Çözüm

1
Analyze site constraints and security requirements
The scenario specifies a WPA3-Personal deployment without RADIUS infrastructure, requiring protection against offline dictionary attacks and management frame spoofing.
Identifying the target security standard and lack of 802.1X enterprise authentication eliminates 802.1X / RADIUS features.
2
Identify the key authentication upgrade in WPA3-Personal
Simultaneous Authentication of Equals (SAE) replaces WPA2 PSK.
SAE utilizes the Dragonfly Key Exchange to ensure forward secrecy and protect against offline dictionary attacks without requiring user-specific certificates.
3
Identify the management frame protection requirement
Protected Management Frames (PMF / IEEE 802.11w) are mandatory in WPA3.
PMF authenticates management frames such as deauthentication and disassociation, mitigating wireless spoofing attacks.

Anahtar Kavram

WPA3-Personal Security Enhancements (SAE and PMF)
Bu soruyu puanla