In WPA3, which concept used in WPA2-Personal is replaced by Dragonfly Key Exchange?

• A. Pre-Shared Key (PSK)
• B. Public Key Infrastructure (PKI)
• C. Certificate-based authentication
• D. TLS handshake

Answer: (A)

Pre-Shared Key is the element WPA2-Personal relies on. In that setup, every client and the access point share a single password, and that password is used to derive the session keys for encrypting traffic. If that password is weak, an attacker can capture the handshake and perform offline guesses to find the password and then decrypt traffic. WPA3-Personal replaces that mechanism with the Dragonfly (SAE) password-authenticated key exchange. This approach still uses a password, but it proves knowledge of the password through an interactive exchange and creates fresh keys for each session, with mutual authentication and forward secrecy. That means even if someone later learns the password, past sessions stay protected, and offline dictionary attacks are far more difficult or impractical. PKI, certificate-based authentication, and TLS handshakes are not the mechanism replaced in WPA3-Personal; they relate to other authentication frameworks (like WPA2-Enterprise) rather than the personal-mode setup.