ISC2 CISSP (Certified Information Systems Security Professional)Communication and Network SecurityMedium
An organization is deploying a new wireless network (WLAN) in a high-density environment, such as a large auditorium, where many users will connect simultaneously. The security team is concerned about the potential for denial-of-service (DoS) attacks and the need for robust frame protection against injection attacks. They also want to ensure backward compatibility with WPA2 devices where possible, but prioritize the strongest security features for new devices. Which wireless security standard addresses these concerns?
- AWPA2-Enterprise
- BWPA3
- CWPA-Personal
- DWEP
Show answer & explanationAnswer & explanation
Correct answer: B. WPA3
WPA3 offers enhanced security features over WPA2, including more robust protection against brute-force attacks (SAE), improved frame protection (enhanced encryption of management frames), and better resilience against DoS attacks. It also maintains backward compatibility with WPA2 devices in mixed mode deployments.
Why the other options are wrong
- A. WPA2-Enterprise provides strong security but does not specifically address new DoS protections or the enhanced frame protection features found in WPA3.
- C. WPA-Personal uses TKIP, which is deprecated and considered insecure, and lacks the advanced protections needed.
- D. WEP is an outdated and highly vulnerable standard that should never be used.
WPA3
The latest generation of Wi-Fi Protected Access security, offering enhanced cryptographic strength, improved authentication, and better resilience against common wireless attacks.
- Uses Simultaneous Authentication of Equals (SAE) for stronger key establishment.
- Provides Management Frame Protection (MFP) for integrity of management frames.
- Offers WPA3-Personal for home, WPA3-Enterprise for corporate.
- Includes Enhanced Open for public Wi-Fi.
Memory trick: WPA3 is the newest shield for Wi-Fi.