What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?

WPA3-Personal security replaces the Pre-Shared Key (PSK) authentication of WPA2-Personal with Simultaneous Authentication of Equals (SAE). SAE is a secure key establishment protocol that derives a unique Pairwise Master Key (PMK) for each client session. This per-session key derivation provides forward secrecy and makes the network resilient to offline dictionary attacks, as an attacker cannot capture traffic and crack the passphrase to derive the PMK used by other clients or sessions.

A. WPA3-Enterprise uses the 802.1X/EAP framework for authentication, not SAE. The PMK is derived from the EAP exchange.
C. This describes WPA2-Personal, where the PMK is derived directly from the passphrase and is static across sessions.
D. The PMK is never directly communicated to clients; it is independently derived. In WPA3-Personal, it is not the same for each session.

1. Aruba Networks. (2020). ArubaOS 8.6.0.0 User Guide. "WPA3" section, p. 488. "WPA3-Personal leverages Simultaneous Authentication of Equals (SAE) to provide stronger protections for users against password guessing attempts... SAE derives the pairwise master key (PMK) from the password and the MAC addresses of both the client and the AP."

2. Wi-Fi Alliance. (2020). Wi-Fi CERTIFIED WPA3™ Specification, Version 3.1. Section 3.1.1, "SAE Handshake". "The SAE handshake provides mutual authentication and derives a fresh Pairwise Master Key (PMK) between a peer STA and an AP."