Full form: Wi-Fi Protected Access 2
Also known as: Wi-Fi Protected Access 2, WPA2-PSK, WPA2-Enterprise, IEEE 802.11i
Quick Definition
The current standard Wi-Fi security protocol using AES-CCMP encryption.
WPA2 (IEEE 802.11i) uses AES-CCMP (Advanced Encryption Standard — Counter Mode CBC-MAC Protocol) for strong wireless encryption. WPA2 has two modes: Personal (WPA2-PSK, shared passphrase) and Enterprise (WPA2-Enterprise, uses 802.1X with a RADIUS server for per-user authentication). WPA2 replaced WPA (which used TKIP) and the broken WEP protocol. WPA2 is still widely deployed, though WPA3 offers stronger security.
WPA2-Personal uses a pre-shared key (PSK) — all users share the same passphrase. WPA2-Enterprise uses 802.1X with individual user credentials from a RADIUS server — more secure for corporate environments.
An open-standard AAA protocol that uses UDP and encrypts only the password.
The latest Wi-Fi security standard featuring SAE (Simultaneous Authentication of Equals) and enhanced protection.
An IEEE standard for port-based authentication that requires credentials before granting network access.
WPA2 (IEEE 802.11i) uses AES-CCMP (Advanced Encryption Standard — Counter Mode CBC-MAC Protocol) for strong wireless encryption. WPA2 has two modes: Personal (WPA2-PSK, shared passphrase) and Enterprise (WPA2-Enterprise, uses 802.1X with a RADIUS server for per-user authentication). WPA2 replaced WPA (which used TKIP) and the broken WEP protocol. WPA2 is still widely deployed, though WPA3 offers stronger security.
WPA2-Personal uses a pre-shared key (PSK) — all users share the same passphrase. WPA2-Enterprise uses 802.1X with individual user credentials from a RADIUS server — more secure for corporate environments.
WPA2 falls under the Wireless domain of the 200-301 exam. Understanding it in context with related terms like wpa3 and 802-1x is essential for answering scenario-based questions correctly.