CWNP CWSP-207 Exam - Topic 4 Question 41 Discussion

Question

CWNP CWSP-207 Exam - Topic 4 Question 41 Discussion

Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

B) If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user's passphrase. The PMK is then used during the 4-way handshake to create data encryption keys.

C) After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK, is derived from the AAA key and is hashed with the PMK to create the PTK and GTK.

D) The PMK is generated from a successful mutual EAP authentication. When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake.

Accepted Answer

A) The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK. The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.

CWNP CWSP-207 Exam - Topic 4 Question 41 Discussion

CWNP CWSP-207 Exam - Topic 4 Question 41 Discussion

Contribute your Thoughts:

Amie