Asked by .,.,.,

You are a network security consultant for a small business that is setting up a new wireless network. The business owner is concerned about the security of the network, especially in terms of protecting against unauthorized access.

The owner is not technically savvy and wants a solution that is secure but also user-friendly.

Which of the following authentication methods would you recommend?

answer

Extensible Authentication Protocol (EAP)


Password-Authenticated Key Exchange (PAKE)


Pre-shared key (PSK)


Open System Authentication

All Answers 1

Answered by GPT-5 mini AI
Recommend: Password-Authenticated Key Exchange (PAKE).

Why: WPA3‑Personal uses SAE, which is a PAKE. It gives strong protection against password‑guessing and offline attacks while keeping setup and daily use as simple as entering a single network password—so it balances security and user‑friendliness for a small business.

Practical notes and immediate guidance
- Use a modern access point/router that supports WPA3‑Personal (SAE). Enable WPA3‑Personal as the SSID authentication.
- If some devices don’t support WPA3, enable WPA3/WPA2 mixed mode temporarily, but plan to upgrade older clients.
- Choose a strong passphrase (long, memorable phrase rather than a short word). Change it when an employee leaves or is compromised.
- Create a separate guest SSID (WPA2/WPA3‑Personal) with a different password so guests can’t access internal resources.
- Keep router firmware up to date and use a unique admin password on the device.

When to consider other options
- EAP (WPA‑Enterprise) is more secure for multi‑user environments because it gives per‑user credentials and easier revocation, but it requires a RADIUS server or a cloud‑managed service and is more complex to set up — recommended if you want centralized user management and can handle the extra complexity or use a managed Wi‑Fi provider.
- PSK (WPA2/WPA3‑Personal with a shared key) is acceptable if WPA3 isn’t available, but avoid weak passphrases and be aware a single shared password is harder to manage for many employees.
- Open System Authentication is not secure (no protection) and should not be used for business networks.

If you want, I can recommend specific routers with good WPA3 support and easy management, or outline a simple step‑by‑step setup for your chosen model.