A weekend farmers-market booth network has no certificates, no directory, and only a passphrase for a temporary AP. Which authentication choice fits?
Select an answer to reveal the explanation.
Short Explanation
Pop-up booth, passphrase only, no PKI or AD? That’s Personal/SAE territory—not 192-bit Enterprise theater, not piping the booth into city AD, and not leaving it wide open.
Full Explanation
A weekend farmers-market booth network with no certificates, no directory, and only a passphrase for a temporary AP fits WPA3-Personal with SAE using the booth passphrase. WPA3-Enterprise 192-bit with mandatory client certificates exceeds the available identity infrastructure. Production staff RADIUS with PEAP against city AD is inappropriate for a temporary booth and risks exposing staff AAA. Open authentication with the booth name as the only identifier provides no passphrase-based confidentiality. Exam caveat: match AKM to available identity plumbing—temporary passphrase-only sites map to Personal SAE, not Enterprise 192-bit or open networks. Operational check: configure the booth AP for WPA3-Personal SAE, use a long random passphrase distributed out-of-band to vendors, tear down the SSID after the market, and rotate the secret if the AP is reused. Log the temporary WLAN in the municipal special-event checklist. In municipal WLAN operations, record the rationale in the change ticket so future on-call staff know which control was chosen and which failure modes the rejected options would create for city services. Re-validate after the next maintenance window that the same control still holds under the infrastructure versions and client fleets used by the civic environment.