List common wireless security protocols and explain why WPA2/WPA3 are preferred over earlier standards.

• A. WEP is insecure; WPA adds TKIP; WPA2 uses CCMP/AES; WPA3 improves encryption and authentication; WPA2/3 preferred.
• B. WEP is strongest; WPA is insecure; WPA2 is deprecated; WPA3 not supported.
• C. WEP uses AES; WPA uses DES; WPA2 uses 3DES; WPA3 uses RC4.
• D. WEP, WPA, WPA2, WPA3 identical in security; all equally recommended.

Answer: (A)

Understanding why newer wireless security protocols are preferred comes down to how they protect confidentiality and integrity, and how they handle authentication. WEP is insecure because it uses a short, static initialization vector with a stream cipher, which lets attackers capture enough packets to deduce the key and decrypt traffic. WPA addressed WEP’s flaws by introducing TKIP, which adds per-packet key mixing and a stronger integrity check, but it still relies on older, weaker cryptographic principles and has known attack paths, so it isn’t considered robust against modern threats.

WPA2 moves to the stronger Encryptor/Authenticator model with CCMP built on AES. This provides solid confidentiality and message integrity with a much more resistant encryption standard, making it the baseline security for most networks today. WPA3 raises the bar even further by changing how users authenticate: the Simultaneous Authentication of Equals (SAE) handshake protects against offline dictionary attacks on passwords, and it strengthens protection on open networks with individualized encryption, plus requires improved management frame protection. It also offers stronger options for enterprise-grade security.

So the best choice reflects a progression: WEP’s vulnerabilities, the transitional but weaker WPA with TKIP, and the stronger WPA2 using AES-based CCMP, with WPA3 adding even tighter authentication and protections. The other statements contradict how these protocols actually work or whether they’re supported, which is why they aren’t correct.