A security analyst is investigating a potential rogue access point on the corporate network. The analyst has identified an unknown SSID broadcasting from an office area. To confirm whether it is a rogue AP, which combination of actions should the analyst take?

Use a deauthentication attack to disconnect clients from the unknown AP and see if they reconnect to the corporate network.

Use Wireshark to capture traffic from the unknown AP and analyze for credentials.

Use aircrack-ng to crack the unknown AP's encryption and then connect to it.

Use a wireless scanner to locate the AP's physical position and check the switch's MAC address table for the AP's BSSID.

A security analyst is using Kismet to perform wireless network discovery. The analyst wants to identify which networks are using WEP encryption. Which information from Kismet will help the analyst make this determination?

The 'Encryption' column in the network list

EC-CouncilCertified Ethical Hacker

Domain 6Objective 2

Wireless Hacking Methodology CEH Practice Questions (Page 1)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

11concepts

Questions 1–5

1application · medium
A security analyst is investigating a potential rogue access point on the corporate network. The analyst has identified an unknown SSID broadcasting from an office area. To confirm whether it is a rogue AP, which combination of actions should the analyst take?
Select an answer first
2foundation · easy
During wireless traffic analysis, a security analyst captures packets and wants to identify the encryption protocol used by a WPA2-Enterprise network. Which field in the captured beacon frame would provide this information?
Select an answer first
3application · medium
A security analyst is monitoring a wireless network and wants to identify which encryption protocol is being used by a specific access point. The analyst has captured beacon frames. Which information in the beacon frame will reveal the encryption protocol?
Select an answer first
4foundation · easy
Which technique is commonly used to detect rogue access points by examining the wired network for MAC addresses that are not associated with known access points?
Select an answer first
5application · easy
A security analyst is using Kismet to perform wireless network discovery. The analyst wants to identify which networks are using WEP encryption. Which information from Kismet will help the analyst make this determination?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wireless Hacking Methodology CEH Practice Questions (Page 1)

Questions 1–5

A security analyst is investigating a potential rogue access point on the corporate network. The analyst has identified an unknown SSID broadcasting from an office area. To confirm whether it is a rogue AP, which combination of actions should the analyst take?

During wireless traffic analysis, a security analyst captures packets and wants to identify the encryption protocol used by a WPA2-Enterprise network. Which field in the captured beacon frame would provide this information?

A security analyst is monitoring a wireless network and wants to identify which encryption protocol is being used by a specific access point. The analyst has captured beacon frames. Which information in the beacon frame will reveal the encryption protocol?

Which technique is commonly used to detect rogue access points by examining the wired network for MAC addresses that are not associated with known access points?

A security analyst is using Kismet to perform wireless network discovery. The analyst wants to identify which networks are using WEP encryption. Which information from Kismet will help the analyst make this determination?

Keep studying — Wireless Network Hacking