A network administrator notices that several wireless clients are repeatedly disconnecting from the corporate Wi-Fi and reconnecting. The administrator suspects a deauthentication attack. Which countermeasure would be most effective in mitigating this attack?

Increase the transmit power of access points

Use MAC filtering to allow only known devices

Disable SSID broadcast to hide the network

Enable 802.11w (Management Frame Protection) on the access points

A company wants to prevent wireless eavesdropping on their network. They have deployed WPA2-Enterprise with 802.1X. Which additional measure would most effectively protect against eavesdropping?

Use WPA3-Enterprise with SAE and forward secrecy

Increase the transmit power of access points

A network administrator is comparing WEP and WPA2 for a legacy deployment. The administrator notes that WPA2 uses AES-CCMP instead of RC4. What is the primary security benefit of this change?

AES-CCMP uses a longer IV that never repeats

AES-CCMP eliminates the need for authentication

AES-CCMP is faster and uses less CPU

AES-CCMP provides stronger encryption and a message integrity check that prevents bit-flipping attacks

A hospital is deploying a new Wi-Fi network and must support legacy devices that only support WPA2, but they want to provide forward secrecy for newer devices. Which approach best meets both requirements?

Configure WPA3/WPA2 mixed mode with SAE for capable devices and PSK for legacy devices

Use only WPA2 with AES-CCMP and a strong passphrase

Use WPA2 with TKIP to maximize compatibility

Use WPA3-only with SAE and disable legacy support

A small business wants to secure its Wi-Fi network with WPA2-Personal. The owner asks for the strongest configuration that is still compatible with all existing devices, which support WPA2 but not WPA3. Which setting should the administrator choose?

WPA2-Enterprise with 802.1X and EAP-TLS

WPA3-SAE with AES-CCMP encryption

WPA2-PSK with AES (CCMP) encryption

EC-CouncilCertified Ethical Hacker

Domain 6Objective 1

Wireless Encryption and Threats CEH Practice Questions (Page 1)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 1–5

1application · medium
A network administrator notices that several wireless clients are repeatedly disconnecting from the corporate Wi-Fi and reconnecting. The administrator suspects a deauthentication attack. Which countermeasure would be most effective in mitigating this attack?
Select an answer first
2expert · hard
A company wants to prevent wireless eavesdropping on their network. They have deployed WPA2-Enterprise with 802.1X. Which additional measure would most effectively protect against eavesdropping?
Select an answer first
3application · medium
A network administrator is comparing WEP and WPA2 for a legacy deployment. The administrator notes that WPA2 uses AES-CCMP instead of RC4. What is the primary security benefit of this change?
Select an answer first
4application · medium
A hospital is deploying a new Wi-Fi network and must support legacy devices that only support WPA2, but they want to provide forward secrecy for newer devices. Which approach best meets both requirements?
Select an answer first
5application · medium
A small business wants to secure its Wi-Fi network with WPA2-Personal. The owner asks for the strongest configuration that is still compatible with all existing devices, which support WPA2 but not WPA3. Which setting should the administrator choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.