300-425 Question 186
Single answerA network administrator is deploying a wireless network for an enterprise and needs to ensure secure client authentication and data encryption. The organization requires that the authentication process integrates with the existing RADIUS server, and clients should utilize certificate-based authentication. Which of the following configurations should the administrator implement to meet these requirements?
- A
WPA3-Personal with a pre-shared key (PSK)
- B
WPA2-Enterprise with PEAP and MS-CHAPv2
- C
WPA3-Enterprise with EAP-TLS
- D
WPA2-Personal with 802.1X authentication
Show answer and explanation
Correct answer: C
Explanation
The correct solution is WPA3-Enterprise with EAP-TLS, as it provides secure client authentication using certificates, integrates with a RADIUS server, and ensures robust encryption. WPA3 improves upon WPA2 by introducing stronger security measures, and EAP-TLS ensures that certificates are used for authentication, eliminating the vulnerabilities associated with password-based methods.
- A. Incorrect.
WPA3-Personal with a pre-shared key (PSK) does not meet the requirement for enterprise-grade authentication or certificate-based authentication. It is designed for simple deployments using a shared password.
- B. Incorrect.
WPA2-Enterprise with PEAP and MS-CHAPv2 supports integration with a RADIUS server, but it relies on password-based authentication rather than certificate-based authentication, making it less secure.
- C. Correct.
WPA3-Enterprise with EAP-TLS provides the highest level of security with enterprise-grade authentication. It integrates with a RADIUS server and uses certificate-based authentication, which meets the requirements outlined in the scenario.
- D. Incorrect.
WPA2-Personal with 802.1X authentication is not a valid configuration. WPA2-Personal is designed for pre-shared key authentication and does not support 802.1X or enterprise-grade security features.