A company's security policy requires that wireless access be audited quarterly. During an audit, the auditor finds that some APs are still using WPA2-Personal with a shared passphrase, while others use WPA2-Enterprise with 802.1X. The auditor also finds that the passphrase is printed on a label attached to the AP. What is the most significant security weakness?

The lack of WPA3 support on all APs

The use of WPA2-Personal with a shared passphrase that is physically accessible

A company's security team discovers an unknown access point broadcasting the corporate SSID with an open authentication method. They need to automatically block clients from connecting to this rogue device and alert administrators. Which solution should they deploy?

A network access control (NAC) solution that only checks endpoint compliance

A wireless intrusion prevention system (WIPS) with active containment

A wireless intrusion detection system (WIDS) with logging only

A spectrum analyzer that identifies interference sources

A hospital is deploying a new wireless network for staff tablets that access patient records. They require strong encryption and per-user authentication. Which configuration should they implement?

WPA2-Enterprise with EAP-PEAP-MSCHAPv2

WPA2-Personal with a pre-shared key

WPA3-Enterprise with 802.1X/EAP-TLS

A company is migrating from WPA2-Enterprise to WPA3-Enterprise. The network includes a mix of older devices that support only WPA2 and newer devices that support WPA3. The security team wants to maintain strong security while ensuring all devices can connect. What is the best approach?

Use WPA2-Personal for older devices and WPA3-Enterprise for newer devices on the same SSID.

Keep the network on WPA2-Enterprise until all devices are upgraded.

Enable WPA3 transition mode, which allows both WPA2 and WPA3 devices to connect while using WPA3 for capable devices.

Configure the network to use WPA3 only and require all older devices to be replaced.

A hospital has a WIPS that detects a rogue AP on the same channel as a critical medical telemetry system. The WIPS is configured to automatically contain rogue APs by sending deauthentication frames. The telemetry system is not Wi-Fi but uses the same 2.4 GHz band. What is the most significant risk of the WIPS's automatic containment?

The WIPS will consume excessive bandwidth on the wired network

The WIPS will automatically disconnect all legitimate clients from the hospital's Wi-Fi

The WIPS may not detect the rogue AP if it is on a different channel

Deauthentication frames may interfere with the medical telemetry system, causing disruption

EC-CouncilCertified Ethical Hacker

Domain 6Objective 4

Wireless Attack Countermeasures CEH Practice Questions (Page 1)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 1–5

1expert · hard
A company's security policy requires that wireless access be audited quarterly. During an audit, the auditor finds that some APs are still using WPA2-Personal with a shared passphrase, while others use WPA2-Enterprise with 802.1X. The auditor also finds that the passphrase is printed on a label attached to the AP. What is the most significant security weakness?
Select an answer first
2application · medium
A company's security team discovers an unknown access point broadcasting the corporate SSID with an open authentication method. They need to automatically block clients from connecting to this rogue device and alert administrators. Which solution should they deploy?
Select an answer first
3application · medium
A hospital is deploying a new wireless network for staff tablets that access patient records. They require strong encryption and per-user authentication. Which configuration should they implement?
Select an answer first
4expert · hard
A company is migrating from WPA2-Enterprise to WPA3-Enterprise. The network includes a mix of older devices that support only WPA2 and newer devices that support WPA3. The security team wants to maintain strong security while ensuring all devices can connect. What is the best approach?
Select an answer first
5expert · hard
A hospital has a WIPS that detects a rogue AP on the same channel as a critical medical telemetry system. The WIPS is configured to automatically contain rogue APs by sending deauthentication frames. The telemetry system is not Wi-Fi but uses the same 2.4 GHz band. What is the most significant risk of the WIPS's automatic containment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wireless Attack Countermeasures CEH Practice Questions (Page 1)

Questions 1–5

A company's security team discovers an unknown access point broadcasting the corporate SSID with an open authentication method. They need to automatically block clients from connecting to this rogue device and alert administrators. Which solution should they deploy?

A hospital is deploying a new wireless network for staff tablets that access patient records. They require strong encryption and per-user authentication. Which configuration should they implement?

A company is migrating from WPA2-Enterprise to WPA3-Enterprise. The network includes a mix of older devices that support only WPA2 and newer devices that support WPA3. The security team wants to maintain strong security while ensuring all devices can connect. What is the best approach?

Keep studying — Wireless Network Hacking