A network administrator is trying to secure a wireless network against WPS PIN brute-force attacks. The administrator has disabled WPS on the access points, but some older clients still rely on WPS for configuration. Which of the following is the most secure alternative for those clients?

Use WPS with push-button configuration (PBC) instead of PIN entry.

Keep WPS enabled but change the PIN regularly.

Configure the clients manually with the Wi-Fi password.

What is the KRACK attack and what does it exploit?

It exploits a vulnerability in the 4-way handshake to allow replay and decryption of WPA2 traffic

It sends deauthentication frames to force a handshake capture

It uses a rogue access point to capture credentials

It exploits the WPS PIN to recover the network password

Which technique is commonly used to recover a WPA2 PSK after capturing the 4-way handshake?

Offline dictionary or brute-force attack using tools like Hashcat

Replay attack to capture the PSK directly

Man-in-the-middle attack to intercept the PSK during authentication

Online brute-force attack against the access point's login page

EC-CouncilCertified Ethical Hacker

Domain 6Objective 3

Wi-Fi Encryption Cracking CEH Practice Questions (Page 4)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

10concepts

Questions 16–20

16expert · medium
A network administrator is trying to secure a wireless network against WPS PIN brute-force attacks. The administrator has disabled WPS on the access points, but some older clients still rely on WPS for configuration. Which of the following is the most secure alternative for those clients?
Select an answer first
17foundation · easy
What is the KRACK attack and what does it exploit?
Select an answer first
18foundation · easy
Which tool is specifically used for GPU-accelerated offline password cracking?
Select an answer first
19foundation · easy
Which technique is commonly used to recover a WPA2 PSK after capturing the 4-way handshake?
Select an answer first
20application · medium
A security auditor is testing a WPA2-PSK network. The auditor wants to perform an offline password attack but cannot capture a 4-way handshake because no clients are currently connected. Which attack technique can be used to obtain a hash that can be cracked offline without requiring a client?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wi-Fi Encryption Cracking CEH Practice Questions (Page 4)

Questions 16–20

A network administrator is trying to secure a wireless network against WPS PIN brute-force attacks. The administrator has disabled WPS on the access points, but some older clients still rely on WPS for configuration. Which of the following is the most secure alternative for those clients?

What is the KRACK attack and what does it exploit?

Which tool is specifically used for GPU-accelerated offline password cracking?

Which technique is commonly used to recover a WPA2 PSK after capturing the 4-way handshake?

A security auditor is testing a WPA2-PSK network. The auditor wants to perform an offline password attack but cannot capture a 4-way handshake because no clients are currently connected. Which attack technique can be used to obtain a hash that can be cracked offline without requiring a client?

Keep studying — Wireless Network Hacking