A company is deploying a wireless network for a high-security facility. They require mutual authentication and forward secrecy. They also need to support some legacy devices that only support WPA2. Which configuration best meets these requirements?

WPA3-Enterprise with 802.1X and SAE for WPA3 devices, plus a separate WPA2-Enterprise SSID for legacy devices

WPA2-Enterprise with 802.1X and AES-CCMP

WPA2-Personal with a long passphrase

A company is deploying WPA3-Enterprise and wants to ensure that each user's session remains confidential even if the server's private key is compromised later. Which WPA3 feature provides this protection?

Perfect forward secrecy (PFS) via ECDHE

TKIP with per-packet key mixing

A penetration tester is assessing a legacy wireless network that still uses WEP. The tester captures a large volume of traffic and later recovers the WEP key within minutes. Which combination of weaknesses made this attack feasible?

Short IV space and RC4 key-scheduling weaknesses

Use of TKIP and per-packet key mixing

Absence of authentication and open network access

Lack of message integrity check and weak password hashing

A company's IT team is upgrading from WEP to WPA2 for its office Wi-Fi. They want to use a pre-shared key (PSK) for simplicity, but they are concerned about offline dictionary attacks. Which configuration would best address their concern while still using WPA2?

Use a long, random passphrase of at least 20 characters

Use a short, memorable passphrase to reduce user error

Disable SSID broadcast to hide the network

Enable WPS with a PIN to simplify client connection

A university is upgrading its campus Wi-Fi. The network team must support legacy devices that only support WPA2, but the security team wants to enable WPA3 for newer devices. The budget is limited, and the team cannot replace all access points. What is the most practical approach?

Keep WPA2-PSK and disable WPA3 to avoid compatibility issues

Use a separate SSID for WPA3 and another for WPA2

Enable WPA3/WPA2 mixed mode (transition mode) on the access points

Deploy WPA3-Enterprise with 802.1X and require all devices to support it

EC-CouncilCertified Ethical Hacker

Domain 6Objective 1

Wireless Encryption and Threats CEH Practice Questions (Page 4)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 16–20

16expert · hard
A company is deploying a wireless network for a high-security facility. They require mutual authentication and forward secrecy. They also need to support some legacy devices that only support WPA2. Which configuration best meets these requirements?
Select an answer first
17application · medium
A company is deploying WPA3-Enterprise and wants to ensure that each user's session remains confidential even if the server's private key is compromised later. Which WPA3 feature provides this protection?
Select an answer first
18application · medium
A penetration tester is assessing a legacy wireless network that still uses WEP. The tester captures a large volume of traffic and later recovers the WEP key within minutes. Which combination of weaknesses made this attack feasible?
Select an answer first
19application · medium
A company's IT team is upgrading from WEP to WPA2 for its office Wi-Fi. They want to use a pre-shared key (PSK) for simplicity, but they are concerned about offline dictionary attacks. Which configuration would best address their concern while still using WPA2?
Select an answer first
20expert · hard
A university is upgrading its campus Wi-Fi. The network team must support legacy devices that only support WPA2, but the security team wants to enable WPA3 for newer devices. The budget is limited, and the team cannot replace all access points. What is the most practical approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.