SY0-301 · Question #446
A system administrator wants to enable WPA2 CCMP. Which of the following is the only encryption used?
The correct answer is D. AES. WPA2 with CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) mandates the use of AES as its sole encryption algorithm, replacing the weaker RC4 used in older WPA/WEP implementations.
Question
A system administrator wants to enable WPA2 CCMP. Which of the following is the only encryption used?
Options
- ARC4
- BDES
- C3DES
- DAES
How the community answered
(33 responses)- A6% (2)
- B3% (1)
- D91% (30)
Why each option
WPA2 with CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) mandates the use of AES as its sole encryption algorithm, replacing the weaker RC4 used in older WPA/WEP implementations.
RC4 is the stream cipher used by WEP and the optional TKIP mode in WPA; it is not used by WPA2-CCMP and is considered cryptographically weak.
DES is a legacy symmetric block cipher not used in any Wi-Fi security standard including WPA2.
3DES is a block cipher used in older network and payment security protocols but is not part of the WPA2 or CCMP specification.
WPA2-CCMP is built exclusively on AES (Advanced Encryption Standard) operating in Counter Mode (CTR) for confidentiality and CBC-MAC for integrity. AES is the only encryption algorithm permitted under the WPA2-CCMP specification, which is why WPA2 is considered substantially more secure than its predecessors.
Concept tested: WPA2 CCMP encryption algorithm requirement
Source: https://www.wi-fi.org/knowledge-center/faq/what-is-wpa2
Topics
Community Discussion
No community discussion yet for this question.