Wireless Encryption and Threats CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which characteristic of the WEP protocol is the primary reason that an attacker can recover the encryption key after capturing enough traffic?

   • AWEP encrypts data using the AES algorithm with a static key.
   • BWEP uses a 128-bit key that is derived from the SSID.
   • CThe IV is only 24 bits long and is reused frequently.
   • DWEP does not include any integrity check, so packets can be modified.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which wireless attack involves sending management frames to force clients to disconnect from a legitimate access point?

   • AEavesdropping attack
   • BEvil twin attack
   • CDeauthentication attack
   • DRogue access point attack
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst is reviewing wireless logs and notices a large number of disassociation frames being sent to a specific client from an unknown MAC address. The client is a point-of-sale terminal. What is the most likely goal of this attack?

   • AForce the client to reconnect to a rogue access point
   • BRecover the WEP key through IV reuse
   • CPerform a brute-force attack on the WPA2 passphrase
   • DIntercept the client's data by sniffing the wireless medium
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A penetration tester is assessing a wireless network that uses WEP. The tester wants to recover the WEP key as quickly as possible. Which technique would be most effective?

   • AUse a dictionary attack on the passphrase
   • BCapture a large number of packets with unique IVs and use statistical analysis
   • CExploit the KRACK vulnerability
   • DPerform a PMKID attack against the access point
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security team is investigating a series of wireless attacks. They notice that clients are being disconnected from the Wi-Fi network, and then reconnecting to a fake access point that captures their credentials. Which combination of attacks is being used?

   • AKRACK attack followed by a PMKID attack
   • BRogue AP followed by a WPS attack
   • CIV attack followed by a dictionary attack
   • DDeauthentication attack followed by an evil twin attack
   Reveal Solution Discussion Select an answer first