Mitigating Credential Sharing with 802.1X Authentication

312-50v12 By islever Editorial Last updated

Hacking Wireless Networks

Short answer

D Implement 802.1X authentication to enforce individual user identity verification for each network connection.

Question

As the Chief Information Security Officer (CISO) at a large university, you are responsible for the security of a campus-wide Wi-Fi network that serves thousands of students, faculty, and staff. Recently, there has been a rise in reports of unauthorized network access, and you suspect that some users are sharing their login credentials. You are considering deploying an additional layer of security that could effectively mitigate this issue. What would be the most suitable measure to implement in this context?
  1. Implement network segmentation
  2. Deploy a VPN for the entire campus
  3. Enforce a policy of regularly changing Wi-Fi passwords
  4. Implement 802.1X authentication Correct Answer

Key Takeaways

The exam tests the distinction between shared password networks and individualized authentication mechanisms, with the trap being the assumption that changing passwords or segmentation solves the identity problem.

This question addresses securing a campus Wi-Fi network against credential sharing by implementing port-based network access control. The correct solution is 802.1X authentication, which ties network access to individual user identity.

Common mistake: Candidates often choose A (Network Segmentation) because it isolates traffic, but segmentation does not prevent one user from handing their credentials to another within the same segment.

Expert Analysis

Why the Answer Is Correct

Implementing 802.1X authentication is the most suitable measure because it provides port-based network access control that requires individual user credentials for each connection. Unlike static shared passwords, 802.1X uses an authentication server (typically RADIUS) to verify each user's identity uniquely, making it difficult to share valid login credentials effectively since each session is tied to a specific authenticated user.

Why the Other Options Are Wrong

Network segmentation (A) divides the network into subnets but does not inherently authenticate individual users; shared credentials still work across segments. Deploying a VPN (B) adds encryption but relies on the underlying authentication method, so if credentials are shared, the VPN shares those risks too. Regularly changing Wi-Fi passwords (C) is ineffective against credential sharing because once a password is shared, rotating it disrupts legitimate users without preventing unauthorized access by those who already possess the old or new password.

Community Comment Notes

The community consensus strongly supports option D, with users noting that 802.1X is the standard for secure wireless access control. One commenter referenced ChatGPT's explanation of IEEE standards, highlighting that 802.1X uses EAP to exchange messages securely during authentication. Another user simply noted it was 'the only one that makes sense,' reflecting the general understanding that other options do not address individual accountability.

Exam Strategy

When asked about securing wireless networks against credential sharing or unauthorized device access, always look for 802.1X or RADIUS-based solutions as they provide the strongest individual authentication layer.

Frequently Asked Questions

Why doesn't network segmentation stop credential sharing?

Segmentation isolates traffic but doesn't verify who is using the credentials; if a student shares their login, anyone can connect from any segmented area.

Is 802.1X better than just changing Wi-Fi passwords?

Yes, because 802.1X authenticates each user individually via a central server, whereas changing passwords only affects the shared secret used by all users.

More 312-50v12 FAQ →

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. LordXander 👍 2 Answered D
    As it is the only one that makes sense
  2. anarchyeagle 👍 1 Answered D
    Chat GPT: Implement 802.1X authentication: 802.1X is an IEEE Standard for port-based Network Access Control (PNAC). It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN. 802.1X uses the Extensible Authentication Protocol (EAP) to exchange messages during the authentication process. By implementing 802.1X, the university can enforce strong authentication methods that go beyond just a username and password, potentially incorporating certificates or a two-factor authentication system. This can significantly reduce the risk of unauthorized access due to credential sharing, as each user's device would need to be authenticated individually. It also allows for greater control over network access on a per-user basis, making it easier to manage access rights and monitor network usage.
  3. qwerty100 👍 1 Answered D
    D. Implement 802.1X authentication

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Comprehensive Network Scanning Sequence

S-grade

NetBIOS Enumeration on IPv6 Networks

S-grade

Ethical Hacker Liability and Organizational Risk Acceptance

S-grade

Least Likely Social Engineering Method Based on Footprinting Data

S-grade

← Back to 312-50v12 Study Guide