Alright, for this challenge we're going to go through four quiz questions
together.
We'll just ask the question.
Feel free to pause the video, make sure you have ample time to answer.
And if we don't understand anything, then we've got the source for the video
here at
the bottom of each quiz question.
So question number one, what are the two critical components of configuring
wireless security?
So this is interesting because when we look at it, RF containment could
certainly be an
aspect of making sure that we are secure. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
aspect of making sure that we are secure.
We want to keep our RF contained as much as possible.
But it's not nearly as critical as our access control and our privacy.
In order to configure access control, we're going to configure authentication
to help
us with our data privacy.
We're going to want to configure encryption.
And so these are the two big factors when it comes to our wireless
communications.
Anytime we're talking about WPA personal versus WPA enterprise, especially for
example,
the PSK concept versus 802.1x, these are really focused on making sure we have WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the PSK concept versus 802.1x, these are really focused on making sure we have
authentication
and encryption configured.
As we discussed, they scale at different levels and they have different amounts
of granularity
when it comes to configuring each one of these concepts.
Question two, what does WPA enterprise use in order to better use?
Better scale wireless authentication than WPA personal.
So we're comparing WPA enterprise to WPA personal. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we're comparing WPA enterprise to WPA personal.
WPA personal is going to use the pre shared key concept where WPA enterprise is
going
to use a much more complex or at least sophisticated architecture in 802.1x as
well as EAP.
802.1x is going to define the architecture for us, giving us the concept of a
supplicant
and authenticator and then the authentication server on the back end.
Meanwhile, EAP is going to define for us what exactly we're providing here in WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Meanwhile, EAP is going to define for us what exactly we're providing here in
order to authenticate
ourselves.
So this is the enterprise architecture, whereas personal is going to combine
authentication
and encryption into the pre shared key, meaning we're going to use the pre
shared key to
form our encryption keys.
And just the fact that I have the PSK means that I belong on the network.
And as we know, as we discussed, rather, using that for authentication and
using it for encryption,
it's really got a lot of flaws, which is one reason why we want to migrate to W WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
it's really got a lot of flaws, which is one reason why we want to migrate to W
PA three
if we're going to rely on a pre shared key concept.
So with all that in mind, as we explore these answer choices, when we're
comparing WPA enterprise
to WPA personal, it doesn't use better encryption, but it does use a radius
server.
It doesn't use a pre shared key that is what WPA personal does.
And using a web portal for access is something that we can configure with web
auth, but it
isn't actually directly tied to WPA enterprise or WPA personal. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
isn't actually directly tied to WPA enterprise or WPA personal.
And so using a radius server or possibly attack X server here is part of the
802.1x
architecture.
That is what sets enterprise apart from personal.
Well question three, and we're going to ask about that 802.1x architecture.
So which two devices can serve as that authenticator in a wireless network?
Well when I draw out that architecture, we said that the station that's going
to associate
to the network is the supplicant.
And then we're going to have the authentication server here on the back end. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we're going to have the authentication server here on the back end.
But what about this thing in the middle?
This is what we refer to as the authenticator.
And in our case with a wireless network, it could actually be one of two things
.
It could be an access point or it could actually be that the access point sort
of transparently
hands that communication off to the wireless LAN controller.
So our two choices are right there at the top of the list.
An access point or wireless LAN controller keeping in mind that a switch
actually can
serve as the authenticator, but that wouldn't be part of a wireless network. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
serve as the authenticator, but that wouldn't be part of a wireless network.
Alright last question.
What are two goals of the WPA four way handshake?
As with so many other things that we've talked about, WPA is all about
authentication and
encryption.
And so we're going to authenticate the user and we can do this with either
personal via
P shared key.
Again, just having the pre shared key technically is the authentication
mechanism.
I prove I belong on the network because I know the secret password. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I prove I belong on the network because I know the secret password.
And then it's also going to authenticate via enter WPA enterprise and we will
use 802.1x
and EAP for that.
Meanwhile the derivation of the encryption keys.
Yeah, we're going to use the pre shared key to help us with that.
But either way, we're going to create encryption keys for personal and we're
going to do the
exact same thing for enterprise just in a different way.
So the two goals are the same between the two versions.
Just keep in mind that if we're going to use WPA with 802.1x, which is what we WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Just keep in mind that if we're going to use WPA with 802.1x, which is what we
should
be doing in a enterprise corporate network, that it will take a lot longer for
us to get
through that process because we also have to do all the 802.1x stuff first.
And so once we get through all of that, then we can do the WPA four way
handshake.
But in either case, WPA enterprise or WPA personal, we are going to expect to
see that
WPA four way handshake.
And it's actually fun to check that out sometime using wireless packet sniffers WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And it's actually fun to check that out sometime using wireless packet sniffers
because we
can actually see the messages go back and forth as part of that handshake.
I hope this has been informative for you and I'd like to thank you for viewing.