Exam CAS-004 topic 1 question 550 discussion

Actual exam question from CompTIA's CAS-004

Question #: 550
Topic #: 1

A recent security assessment generated a recommendation to transition Wi-Fi to WPA2/WPA3 Enterprise requiring EAP-TLS. Which of the following conditions must be met for the organization's mobile devices to be able to successfully join the corporate wireless network?

A. Client computer X.509 certificates have been installed.
B. Supplicants are configured to provide a 64-bit authenticator.
C. A hardware TOTP token has been issued to mobile users.
D. The device's IPSec configuration matches the VPN concentrator.

Show Suggested Answer

Suggested Answer: A 🗳️

by grelaman at Nov. 5, 2024, 10:57 p.m.

Comments

Submit Cancel

grelaman

7 months, 3 weeks ago

Selected Answer: A

WPA2/WPA3 Enterprise: - Enterprise Mode: Unlike Personal Mode (which uses a pre-shared key), Enterprise Mode uses an authentication server (such as RADIUS) to authenticate each user individually. - Enhanced Security: WPA3 introduces improved security features over WPA2, but both support Enterprise authentication methods. EAP-TLS (Extensible Authentication Protocol - Transport Layer Security): - Strong Mutual Authentication: EAP-TLS is considered one of the most secure EAP methods because it uses mutual authentication between the client and the server. - Certificate-Based Authentication: Requires X.509 digital certificates on both the client device and the authentication server. - No Passwords Involved: Authentication is performed through the exchange of certificates, eliminating the need for username/password credentials. Establish a PKI to issue and manage digital certificates for both client devices and servers.

upvoted 3 times

...