County public-health clinicians authenticate to the clinic WLAN wit…

Question

County public-health clinicians authenticate to the clinic WLAN with usernames and certificates through a RADIUS server. In what order does Enterprise AKM establish security for their sessions?

Accepted Answer

802.1X/EAP authentication that yields a PMK, followed by the 4-way handshake to derive and install pairwise (and related group) keys — Enterprise Wi-Fi is two acts: first prove who you are to RADIUS (802.1X/EAP), then run the 4-way handshake to mint the session keys. Flip that order and you’re hanging locks before you’ve checked the badge.

Answer

4-way handshake first to create keys, then 802.1X/EAP so RADIUS can learn the PMK afterward

Answer

Captive-portal acceptance alone, which replaces both 802.1X and the 4-way handshake on Enterprise SSIDs

Answer

DHCP option 43 provisioning of the PTK before any authentication frame is sent

County public-health clinicians authenticate to the clinic WLAN with usernames and certificates through a RADIUS server. In what order does Enterprise AKM establish security for their sessions?

Short Explanation

Full Explanation