350-401 Question 277
Select 4A network engineer is configuring a wireless network for a small office. The engineer decides to use a Pre-Shared Key (PSK) for authentication. Which of the following considerations should the engineer keep in mind to ensure secure and reliable PSK configuration?
- A
Use a strong, complex passphrase with at least 16 characters.
- B
Share the PSK with users over unsecured communication channels for convenience.
- C
Rotate the PSK periodically to minimize security risks.
- D
Ensure the PSK is unique and not reused across multiple networks.
- E
Enable WPA3-Personal to enhance security when using PSK.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
PSKs are a commonly used method for securing wireless networks, but their effectiveness depends on proper configuration and management. Using a strong, unique passphrase, rotating it periodically, and adopting modern security protocols like WPA3-Personal are all essential steps to ensure the network remains secure. Sharing the PSK over unsecured channels, however, is a poor practice that can lead to unauthorized access.
- A. Correct.
Using a strong, complex passphrase with at least 16 characters is crucial to prevent brute-force attacks and enhance the security of the PSK.
- B. Incorrect.
Sharing the PSK over unsecured communication channels is a bad practice as it can be intercepted by attackers, compromising the network security.
- C. Correct.
Rotating the PSK periodically reduces the risk of unauthorized access in case the key is compromised.
- D. Correct.
Ensuring the PSK is unique and not reused across multiple networks prevents attackers from gaining access to multiple networks with the same key.
- E. Correct.
WPA3-Personal provides enhanced security features, such as SAE (Simultaneous Authentication of Equals), which improves the protection of PSK-based networks.