SSCP Systems Security Certified PractitionerNetwork and Communications SecurityMedium
A company is implementing a new wireless network that requires strong authentication for all users and devices, along with dynamic encryption keys for each session. Which of the following wireless security protocols is best suited to meet these requirements?
- AWPA
- BWPA2-Enterprise
- CWEP
- DWPS
Show answer & explanationAnswer & explanation
Correct answer: B. WPA2-Enterprise
WPA2-Enterprise leverages 802.1X for strong, centralized authentication (often with RADIUS) and provides unique, dynamic encryption keys per user session, fulfilling both requirements.
Why the other options are wrong
- A. WPA (Wi-Fi Protected Access) was an improvement over WEP but still had vulnerabilities and typically used a pre-shared key (PSK) in its personal mode, not dynamic keys per user.
- C. WEP (Wired Equivalent Privacy) is severely insecure, uses static encryption keys, and is easily compromised, making it unsuitable for strong security.
- D. WPS (Wi-Fi Protected Setup) is a feature for simplifying network setup but has significant security vulnerabilities and does not provide strong authentication or dynamic encryption keys.
WPA2-Enterprise
A robust wireless security protocol that uses 802.1X for centralized authentication and dynamic encryption keys.
- Requires an authentication server (e.g., RADIUS).
- Provides per-user, per-session encryption keys.
- Offers stronger security than WPA-Personal (PSK).
Memory trick: WEP is Weak, WPA is Better, WPA2 is Best, WPA3 is Next.