A small business wants to upgrade their wireless security from WEP to a modern standard. They have older laptops that do not support WPA3. They need strong encryption and compatibility. Which option is most appropriate?

Continue using WEP but with a longer key

Use WPA2-Enterprise with 802.1X and a RADIUS server

Use WPA2-Personal with a short passphrase

A company is migrating from WPA2-Enterprise to WPA3-Enterprise. They have a mix of new laptops that support WPA3 and older devices that only support WPA2. Management wants to maintain strong security while ensuring all devices can connect. Which approach is most appropriate?

Use WPA2-Enterprise only until all devices are upgraded

Disable WPA2 entirely and require all devices to upgrade

Use WPA3-Personal for all devices

Enable WPA3-Enterprise with transition mode, allowing WPA2-Enterprise clients to connect

A security administrator discovers an unknown access point broadcasting the corporate SSID with an open authentication configuration in a conference room. The administrator needs to identify the physical location of the device and then prevent it from offering network access. Which approach should the administrator use?

Disable the corporate SSID from broadcasting on all legitimate access points to prevent clients from associating with the rogue device.

Use a wireless intrusion prevention system (WIPS) to locate the device by signal strength and then send a deauthentication attack to disconnect all clients.

Configure the corporate access points to use a different channel than the rogue AP to reduce interference.

Implement MAC address filtering on the wired switch ports to block the rogue AP's MAC address from reaching the network.

A financial institution is deploying a wireless network for employees. The security policy requires mutual authentication and resistance to offline dictionary attacks. The IT team is evaluating EAP methods. Which EAP method should be selected?

EAP-TLS, which uses client and server certificates for mutual authentication and does not rely on passwords.

PEAP-MSCHAPv2, which uses a server certificate and username/password.

LEAP, which uses a shared secret.

EAP-MD5, which uses a simple password hash.

An organization has deployed a WIPS. The WIPS detects an evil twin AP that is broadcasting the corporate SSID with a stronger signal. What is the most appropriate immediate action for the WIPS to take?

Log the event and send an alert to the administrator

Send deauthentication frames to clients associated with the evil twin AP

Change the corporate SSID to a different name

Disable the legitimate access points to avoid confusion

EC-CouncilCertified Ethical Hacker

Domain 6Objective 4

Wireless Attack Countermeasures CEH Practice Questions (Page 3)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 11–15

11application · medium
A small business wants to upgrade their wireless security from WEP to a modern standard. They have older laptops that do not support WPA3. They need strong encryption and compatibility. Which option is most appropriate?
Select an answer first
12expert · hard
A company is migrating from WPA2-Enterprise to WPA3-Enterprise. They have a mix of new laptops that support WPA3 and older devices that only support WPA2. Management wants to maintain strong security while ensuring all devices can connect. Which approach is most appropriate?
Select an answer first
13application · medium
A security administrator discovers an unknown access point broadcasting the corporate SSID with an open authentication configuration in a conference room. The administrator needs to identify the physical location of the device and then prevent it from offering network access. Which approach should the administrator use?
Select an answer first
14expert · hard
A financial institution is deploying a wireless network for employees. The security policy requires mutual authentication and resistance to offline dictionary attacks. The IT team is evaluating EAP methods. Which EAP method should be selected?
Select an answer first
15application · medium
An organization has deployed a WIPS. The WIPS detects an evil twin AP that is broadcasting the corporate SSID with a stronger signal. What is the most appropriate immediate action for the WIPS to take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.