During a red-team exercise, you need to capture credentials from employees connecting to the corporate Wi-Fi. You set up a rogue access point with the same SSID as the legitimate network. Which additional action is most likely to increase the number of victims connecting to your rogue AP?

Disable encryption on the rogue AP to make it appear more open.

Send deauthentication frames to clients connected to the legitimate AP to force them to reconnect.

Use a different channel than the legitimate AP.

Increase the transmit power of the rogue AP to maximum.

A penetration tester is attempting to capture a WPA2 handshake from a network with an active client. The client is connected, but the tester is not capturing the handshake. Which action should the tester take to force the client to reconnect and generate a new handshake?

Send a deauthentication frame to the client's MAC address.

Send a probe request to the client.

Send a disassociation frame to the AP.

Send an association request to the AP.

What is the purpose of a deauthentication attack in the context of WPA2 cracking?

To prevent the client from accessing the network permanently

To force a client to disconnect and reconnect, allowing capture of the 4-way handshake

To capture the WPS PIN from the client

To inject malicious packets into the network

EC-CouncilCertified Ethical Hacker

Domain 6Objective 3

Wi-Fi Encryption Cracking CEH Practice Questions (Page 3)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

10concepts

Questions 11–15

11foundation · easy
Which tool is primarily used for capturing Wi-Fi packets and performing WEP/WPA cracking?
Select an answer first
12application · medium
During a red-team exercise, you need to capture credentials from employees connecting to the corporate Wi-Fi. You set up a rogue access point with the same SSID as the legitimate network. Which additional action is most likely to increase the number of victims connecting to your rogue AP?
Select an answer first
13application · easy
A penetration tester is attempting to capture a WPA2 handshake from a network with an active client. The client is connected, but the tester is not capturing the handshake. Which action should the tester take to force the client to reconnect and generate a new handshake?
Select an answer first
14foundation · easy
What is the purpose of a deauthentication attack in the context of WPA2 cracking?
Select an answer first
15application · easy
You are attempting to capture a WPA2 handshake from a network with one active client. You have put your wireless card in monitor mode. Which tool would you use to send deauthentication frames?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wi-Fi Encryption Cracking CEH Practice Questions (Page 3)

Questions 11–15

Which tool is primarily used for capturing Wi-Fi packets and performing WEP/WPA cracking?

During a red-team exercise, you need to capture credentials from employees connecting to the corporate Wi-Fi. You set up a rogue access point with the same SSID as the legitimate network. Which additional action is most likely to increase the number of victims connecting to your rogue AP?

A penetration tester is attempting to capture a WPA2 handshake from a network with an active client. The client is connected, but the tester is not capturing the handshake. Which action should the tester take to force the client to reconnect and generate a new handshake?

What is the purpose of a deauthentication attack in the context of WPA2 cracking?

You are attempting to capture a WPA2 handshake from a network with one active client. You have put your wireless card in monitor mode. Which tool would you use to send deauthentication frames?

Keep studying — Wireless Network Hacking