Wireless Security settings

Question 1

WPA2 (WiFi protected access)PSK problem

Answer 1

-is a security protocol used to secure wireless networks. One of the modes of WPA2 is Pre-Shared Key (PSK), which is commonly used in home networks and small businesses

-with the hash, attackers can brute force the psk

Question 2

WPA3 and GCMP (Galois/Counter Mode Protocol)

Answer 2

WPA3 uses GCMP (Galois/Counter Mode Protocol) for encryption, which provides both confidentiality and integrity. This mode of operation combines the counter mode of encryption with Galois mode of authentication, allowing for faster and more efficient encryption while ensuring data integrity

Question 3

SAE Simultaneous Authentication of Equals

Answer 3

is a secure key establishment protocol used in WPA3 (Wi-Fi Protected Access 3) to enhance the authentication process for wireless networks. It serves as a replacement for the Pre-Shared Key (PSK) method

Question 4

RADIUS (remote authentication dial-in user service)

Answer 4

a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service

Question 5

IEEE 802.1x

Answer 5

-is a network access control standard that defines a framework for authenticating and authorizing devices attempting to connect to a network

-used in conjunction with an access database. (Radius, LDAP, TACACS)

Question 6

EAP (extensible authentication protocol)

Answer 6

a framework that allows for multiple authentication methods to be used to secure network access

Question 7

IEEE 802.1x and EAP

Answer 7

-are integral components of network security, particularly for controlling access to wired and wireless networks. They work in conjunction to authenticate users and devices before granting access to network resources

-Components:
- Supplicant: The client device that wants to connect to the network and must be authenticated.
- Authenticator: The network device (such as a switch or wireless access point) that acts as a gatekeeper, controlling access to the network.
- Authentication Server: A back-end server (commonly a RADIUS server) that performs the actual authentication of the supplicant.