What is the primary goal of an evil twin attack?

To capture credentials or perform man-in-the-middle attacks by impersonating a legitimate access point

To exploit the WPS PIN to recover the network password

To crack the WPA2 pre-shared key by capturing the 4-way handshake

To send deauthentication frames to disconnect clients from the network

You are testing a corporate WPA2-Enterprise network that uses PEAP-MSCHAPv2. You want to capture user credentials. Which attack would be most effective?

Use a deauthentication attack to force clients to reconnect and capture the 4-way handshake.

Use a PMKID attack to capture the PMKID and crack it with a dictionary.

Set up a rogue AP with the same SSID and a rogue RADIUS server to capture the MSCHAPv2 challenge-response.

Use a WPS attack to retrieve the network password.

A network administrator is concerned about WPS vulnerabilities on the company's wireless routers. Which mitigation is most effective against WPS PIN brute-force attacks?

Disable WPS on all access points.

Change the SSID to a non-default value.

Enable WPS with push-button configuration only.

EC-CouncilCertified Ethical Hacker

Domain 6Objective 3

Wi-Fi Encryption Cracking CEH Practice Questions (Page 7)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

10concepts

Questions 31–35

31application · easy
You are preparing a wireless penetration testing toolkit. You need to include tools for WPA2 handshake cracking and WPS PIN attacks. Which pair of tools would you select?
Select an answer first
32foundation · easy
What is the primary goal of an evil twin attack?
Select an answer first
33application · medium
You are testing a corporate WPA2-Enterprise network that uses PEAP-MSCHAPv2. You want to capture user credentials. Which attack would be most effective?
Select an answer first
34foundation · easy
Which type of frame is sent in a deauthentication attack?
Select an answer first
35application · easy
A network administrator is concerned about WPS vulnerabilities on the company's wireless routers. Which mitigation is most effective against WPS PIN brute-force attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wi-Fi Encryption Cracking CEH Practice Questions (Page 7)

Questions 31–35

You are preparing a wireless penetration testing toolkit. You need to include tools for WPA2 handshake cracking and WPS PIN attacks. Which pair of tools would you select?

What is the primary goal of an evil twin attack?

You are testing a corporate WPA2-Enterprise network that uses PEAP-MSCHAPv2. You want to capture user credentials. Which attack would be most effective?

Which type of frame is sent in a deauthentication attack?

A network administrator is concerned about WPS vulnerabilities on the company's wireless routers. Which mitigation is most effective against WPS PIN brute-force attacks?

Keep studying — Wireless Network Hacking