A municipal WLAN review asks what group keys (GTK) protect on a WPA2 network. What is the correct class?
Select an answer to reveal the explanation.
Short Explanation
Unicast gets the per-client PTK; the group chat uses the GTK—like a shared megaphone key for broadcast and multicast to everyone associated. That is the GTK’s job. It is not RADIUS, not all unicast, and not DNS signing.
Full Explanation
The group temporal key (GTK) secures group-addressed traffic—broadcast and multicast—delivered to associated clients on the BSS. Unicast protection uses pairwise key material instead. The GTK is unrelated to RADIUS shared secrets or application DNS signing. Distinguishing GTK from PTK/PMK vocabulary prevents common Personal-mode crypto mix-ups during assessment discussions.