A company is deploying WPA3-Personal and wants to ensure that all clients support it. The security team is concerned about the risk of downgrade attacks where an attacker forces clients to use WPA2. Which configuration is the most effective countermeasure?

Enable WPA3/WPA2 mixed mode to support older devices

Use WPA2-Enterprise with 802.1X

Disable WPA2 compatibility on the access points and use WPA3-only mode

A security consultant is reviewing a wireless network that uses WEP. The consultant recommends upgrading to WPA3, but the client is concerned about the cost of replacing all access points. Which recommendation best addresses the client's concern while improving security?

Upgrade to WPA2 with AES-CCMP on existing access points if they support it

Use WPA2 with TKIP to maintain compatibility

Upgrade to WPA3 by replacing all access points

Keep WEP but change the key weekly

A company's wireless network uses WPA2-Enterprise with PEAP-MSCHAPv2. An attacker sets up a rogue AP with the same SSID and captures the MSCHAPv2 challenge-response. The attacker then performs an offline dictionary attack to recover the user's password. Which change would most effectively mitigate this attack?

Use WPA2-PSK with a strong passphrase

Switch to EAP-TLS with client certificates

Use a longer password for PEAP-MSCHAPv2

A penetration tester is assessing a network that uses WEP. The tester captures a large number of packets but is unable to recover the key because the network is very quiet. What technique should the tester use to accelerate the attack?

Switch to WPA2-PSK and capture the 4-way handshake

Send deauthentication frames to generate more traffic and IVs

Perform a rogue AP attack to capture credentials

Use a longer capture time and wait for natural traffic

In WPA2 Personal mode, which method is used to authenticate clients?

A username and password verified by a RADIUS server

A one-time password sent via SMS

A digital certificate issued by a certificate authority

A pre-shared key (PSK) that is used to derive the session keys

EC-CouncilCertified Ethical Hacker

Domain 6Objective 1

Wireless Encryption and Threats CEH Practice Questions (Page 8)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 36–40

36expert · hard
A company is deploying WPA3-Personal and wants to ensure that all clients support it. The security team is concerned about the risk of downgrade attacks where an attacker forces clients to use WPA2. Which configuration is the most effective countermeasure?
Select an answer first
37expert · hard
A security consultant is reviewing a wireless network that uses WEP. The consultant recommends upgrading to WPA3, but the client is concerned about the cost of replacing all access points. Which recommendation best addresses the client's concern while improving security?
Select an answer first
38expert · hard
A company's wireless network uses WPA2-Enterprise with PEAP-MSCHAPv2. An attacker sets up a rogue AP with the same SSID and captures the MSCHAPv2 challenge-response. The attacker then performs an offline dictionary attack to recover the user's password. Which change would most effectively mitigate this attack?
Select an answer first
39expert · hard
A penetration tester is assessing a network that uses WEP. The tester captures a large number of packets but is unable to recover the key because the network is very quiet. What technique should the tester use to accelerate the attack?
Select an answer first
40foundation · easy
In WPA2 Personal mode, which method is used to authenticate clients?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.