Which authentication method is introduced in WPA3 to replace the pre-shared key (PSK) used in WPA2 Personal?

Extensible Authentication Protocol (EAP)

Simultaneous Authentication of Equals (SAE)

Temporal Key Integrity Protocol (TKIP)

Which cryptographic flaw in WEP allows an attacker to decrypt traffic without knowing the key?

The lack of any encryption on the data payload.

The use of a 64-bit key that is too short for modern computing.

The RC4 cipher's key scheduling algorithm produces weak keys when certain IVs are used.

The use of a public key algorithm that can be factored easily.

A security analyst is investigating a wireless intrusion. The analyst finds that an attacker has set up a rogue AP with the same SSID as the corporate network but with a stronger signal. The rogue AP is using WPA2-PSK with a known passphrase. What is the most likely objective of this attack?

To bypass MAC address filtering

To recover the WEP key of the corporate network

To perform a denial-of-service attack by jamming the legitimate AP

To capture credentials or sensitive data from users who connect to the rogue AP

A security analyst is reviewing wireless traffic and notices that an attacker is capturing data from a WEP network by passively sniffing. The analyst wants to recommend a long-term solution. Which recommendation is the most effective?

Increase the WEP key length to 128 bits

Hide the SSID to make the network less visible

Use MAC address filtering to restrict access

Upgrade the network to WPA2 or WPA3 with AES encryption

EC-CouncilCertified Ethical Hacker

Domain 6Objective 1

Wireless Encryption and Threats CEH Practice Questions (Page 5)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 21–25

21foundation · easy
Which authentication method is introduced in WPA3 to replace the pre-shared key (PSK) used in WPA2 Personal?
Select an answer first
22foundation · easy
Which cryptographic flaw in WEP allows an attacker to decrypt traffic without knowing the key?
Select an answer first
23foundation · easy
Which encryption protocol is used by WPA2 to provide data confidentiality and integrity?
Select an answer first
24expert · hard
A security analyst is investigating a wireless intrusion. The analyst finds that an attacker has set up a rogue AP with the same SSID as the corporate network but with a stronger signal. The rogue AP is using WPA2-PSK with a known passphrase. What is the most likely objective of this attack?
Select an answer first
25application · medium
A security analyst is reviewing wireless traffic and notices that an attacker is capturing data from a WEP network by passively sniffing. The analyst wants to recommend a long-term solution. Which recommendation is the most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.