Wi-Fi Encryption Cracking CEH Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company is planning to upgrade its wireless network to WPA3 to improve security. Which of the following is a key security enhancement provided by WPA3 that addresses vulnerabilities in WPA2?

   • AWPA3 uses a longer IV to prevent IV reuse.
   • BWPA3 disables deauthentication frames to prevent handshake capture.
   • CSAE provides forward secrecy, protecting past sessions even if the password is compromised.
   • DWPA3 uses a static key that is harder to crack.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which authentication method is commonly targeted in WPA/WPA2 Enterprise attacks?

   • ASAE
   • BWEP
   • CPEAP
   • DWPA2-PSK
   Reveal Solution Discussion Select an answer first
4. 38expert · medium

   A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP-MSCHAPv2. The tester has set up a rogue AP with the same SSID and a rogue RADIUS server. Which of the following is the primary goal of this attack?

   • ATo capture the 4-way handshake and crack the PSK.
   • BTo perform a PMKID attack to crack the enterprise password.
   • CTo capture the user's MSCHAPv2 credentials during authentication.
   • DTo perform a KRACK attack to decrypt traffic.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A client has upgraded their router to WPA3-Personal. They ask you to verify that the network is resistant to offline dictionary attacks. Which observation confirms this?

   • AThe router uses a long pre-shared key of 20 characters.
   • BThe router uses SAE (Simultaneous Authentication of Equals) instead of a pre-shared key.
   • CThe router still supports WPA2-PSK as a fallback mode.
   • DThe router broadcasts a hidden SSID.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Why are traditional WPA2 PSK cracking methods ineffective against WPA3?

   • AWPA3 uses SAE, which prevents offline dictionary attacks by requiring interaction for each password guess
   • BWPA3 uses a hardware security module to store the password
   • CWPA3 encrypts the 4-way handshake, preventing capture
   • DWPA3 uses a longer pre-shared key that is impossible to guess
   Reveal Solution Discussion Select an answer first