A security auditor is assessing a small office that still uses WEP for its legacy barcode scanners. The auditor captures several million packets and successfully recovers the WEP key in under 10 minutes using aircrack-ng. Which combination of weaknesses made this attack possible?

AES-CCMP's use of a 128-bit key and 48-bit packet number

RC4 keystream reuse due to short 24-bit IVs and weak key scheduling

TKIP's per-packet key mixing and Michael MIC failure counter

SAE's use of a shared password without forward secrecy

A network administrator is troubleshooting a wireless network that uses WPA2-PSK. Users report that they are frequently disconnected and have to re-enter the passphrase. The administrator suspects a deauthentication attack. Which tool or technique would best confirm this suspicion?

Use a wireless packet analyzer to capture and inspect management frames for spoofed deauthentication frames

Run a spectrum analyzer to detect RF interference

Review the DHCP logs for IP address conflicts

Check the AP's logs for failed authentication attempts

A company has deployed wireless intrusion prevention system (WIPS) sensors. The security team wants to automatically detect and block rogue access points. Which WIPS capability is most directly responsible for this?

Rogue AP detection and containment

A hospital's wireless network has experienced repeated deauthentication attacks that disconnect medical devices. The network uses WPA2-Enterprise. Which countermeasure would most effectively reduce the impact of these attacks?

Enable 802.11w (Management Frame Protection) on all APs and clients

Change the SSID to a non-broadcast (hidden) SSID

Disable DHCP and use static IP addresses

Use WPA2-PSK with a longer passphrase

A company is upgrading its wireless network to WPA3. They want to ensure that even if an attacker captures the 4-way handshake, they cannot guess the passphrase offline. Which WPA3 feature provides this protection?

802.11w Management Frame Protection

SAE (Simultaneous Authentication of Equals)

EC-CouncilCertified Ethical Hacker

Domain 6Objective 1

Wireless Encryption and Threats CEH Practice Questions (Page 6)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 26–30

26application · medium
A security auditor is assessing a small office that still uses WEP for its legacy barcode scanners. The auditor captures several million packets and successfully recovers the WEP key in under 10 minutes using aircrack-ng. Which combination of weaknesses made this attack possible?
Select an answer first
27application · medium
A network administrator is troubleshooting a wireless network that uses WPA2-PSK. Users report that they are frequently disconnected and have to re-enter the passphrase. The administrator suspects a deauthentication attack. Which tool or technique would best confirm this suspicion?
Select an answer first
28application · medium
A company has deployed wireless intrusion prevention system (WIPS) sensors. The security team wants to automatically detect and block rogue access points. Which WIPS capability is most directly responsible for this?
Select an answer first
29application · medium
A hospital's wireless network has experienced repeated deauthentication attacks that disconnect medical devices. The network uses WPA2-Enterprise. Which countermeasure would most effectively reduce the impact of these attacks?
Select an answer first
30application · medium
A company is upgrading its wireless network to WPA3. They want to ensure that even if an attacker captures the 4-way handshake, they cannot guess the passphrase offline. Which WPA3 feature provides this protection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.