Home > Glossary > CompTIA Security+ Certification Exam > Wireless Encryption Protocol (WEP, WPA, WPA2, WPA3)

📖 What is Wireless Encryption Protocol (WEP, WPA, WPA2, WPA3)?

Wireless Encryption Protocols secure wireless network communications by encrypting data transmitted over radio frequencies. These protocols have evolved to address vulnerabilities; WEP is obsolete, WPA2 is widely used but susceptible to attacks, and WPA3 offers the strongest security with enhanced authentication and encryption features.

🥋 Sensei Says:

"Focus on the weaknesses of each protocol. WEP is easily cracked due to its short key length and RC4 cipher. WPA2 is vulnerable to KRACK attacks. WPA3 utilizes Simultaneous Authentication of Equals (SAE) for improved security. Understand the differences in authentication methods (PSK vs. Enterprise)."

📚 Certification: CompTIA Security+ Certification Exam (SY0-701)

🔑 What are the Key Concepts of Wireless Encryption Protocol (WEP, WPA, WPA2, WPA3)?

▸ WEP uses the RC4 stream cipher and a short key length, making it easily compromised with readily available cracking tools.
▸ WPA2 utilizes TKIP and AES encryption, but is vulnerable to the KRACK attack exploiting weaknesses in the 4-way handshake.
▸ WPA3 introduces Simultaneous Authentication of Equals (SAE), replacing the WPA2 pre-shared key (PSK) with a more secure handshake.
▸ Enterprise mode (WPA2/WPA3) uses 802.1X authentication with a RADIUS server for centralized authentication and stronger security.
▸ Understanding the transition from PSK to SAE and the benefits of Protected Management Frames (PMF) in WPA3 is crucial for exam success.

🎯 How does Wireless Encryption Protocol (WEP, WPA, WPA2, WPA3) appear on the SY0-701 Exam?

You may be asked to identify the most vulnerable wireless protocol in a scenario describing a network with outdated security configurations and a history of unauthorized access.

A scenario might describe a client experiencing intermittent connectivity issues after a wireless network upgrade – determine if the issue relates to WPA3 compatibility or PMF support.

Expect questions about choosing the appropriate wireless security protocol based on a company’s security requirements and the devices they need to support.

❓ Frequently Asked Questions

What is the significance of the KRACK attack and how does WPA3 mitigate it?

KRACK exploits vulnerabilities in the WPA2 4-way handshake. WPA3 addresses this by using SAE, which provides forward secrecy and prevents key re-use, making it much harder to exploit.

When would you choose WPA2 Enterprise over WPA2 Personal (PSK)?

WPA2 Enterprise uses 802.1X authentication with a RADIUS server, offering centralized user management and stronger security than PSK, which relies on a shared password. It's ideal for larger organizations.

What are Protected Management Frames (PMF) and why are they important in WPA3?

PMF encrypts management frames, preventing attackers from deauthenticating clients or launching man-in-the-middle attacks. WPA3 mandates PMF, significantly improving wireless network resilience.

Related Terms from CompTIA Security+ Certification Exam

Threat Hunting Hypervisor Security Baseline Firewall Whitelisting Privilege Escalation

📝 Related Study Guides

Study Guide 9 min read

How to Pass CompTIA Security+ (SY0-701) on Your First Try

To pass CompTIA Security+ SY0-701 on your first try, build a structured 6-8 week study plan covering all five domains, prioritize understanding concepts over memorization, practice with scenario-based questions daily, and consistently score 85% or higher on practice exams before scheduling your test. Hands-on lab experience is essential for performance-based questions.

Deep Dive 8 min read

Zero Trust Architecture: Security+ (SY0-701) Deep Dive

Zero Trust architecture is a security framework based on the principle "never trust, always verify." Unlike traditional perimeter security, it assumes breaches are inevitable and requires strict identity verification for every person and device attempting to access resources, regardless of whether they are inside or outside the network perimeter.

Exam Tips 8 min read

Security+ PBQs: Master Firewall ACLs & Incident Response

Security+ Performance-Based Questions (PBQs) are scenario-driven simulations requiring you to apply knowledge to real-world tasks. To master them, focus on firewall ACL rule ordering, the "implicit deny" principle, and analyzing system logs for incident response. Consistent practice with high-fidelity simulations is the most effective way to ensure exam success.