A company is upgrading its wireless network to meet higher security standards. The security team requires a protocol that provides strong encryption, uses Simultaneous Authentication of Equals (SAE) for enhanced password-based authentication, and offers individual data encryption for each client. Which wireless security protocol should the company implement?
- AWPA2-PSK
- BWPA2-Enterprise
- CWPA3 Enterprise
- DWPA3 Personal
Show answer & explanationAnswer & explanation
Correct answer: D. WPA3 Personal
WPA3 Personal (also known as WPA3-SAE) is the correct choice. It specifically uses Simultaneous Authentication of Equals (SAE) for robust password-based authentication, provides stronger encryption than WPA2, and offers individual data encryption for each client, even in pre-shared key (PSK) mode, enhancing privacy and security. While WPA3 Enterprise exists, the question emphasizes 'password-based authentication' (PSK equivalent) and 'individual data encryption for each client' which are hallmarks of WPA3 Personal.
Why the other options are wrong
- A. WPA2-PSK uses a pre-shared key but lacks SAE and the stronger encryption/privacy features of WPA3.
- B. WPA2-Enterprise uses 802.1X with a RADIUS server for authentication, not primarily password-based (PSK) authentication as implied by SAE.
- C. WPA3 Enterprise uses 802.1X with a RADIUS server and offers the highest security, but the prompt specifically mentions SAE and password-based authentication which points to the Personal mode.
WPA3 Personal (SAE)
The version of WPA3 designed for home and small office networks, using Simultaneous Authentication of Equals (SAE) for stronger password-based authentication.
- Replaces WPA2-PSK with SAE, making it more resilient to offline dictionary attacks.
- Provides opportunistic wireless encryption (OWE) for open networks, enhancing privacy.
- Offers individual data encryption for each client, even with a shared password.
Memory trick: WPA3 brings SAE for personal, and 802.1X for enterprise.