A penetration tester is following a systematic wireless hacking methodology. The tester has completed network discovery and traffic analysis, and has identified that the target network uses WPA2-PSK. The tester has also captured a four-way handshake. Which step should the tester perform next?

Attempt to crack the WPA2 passphrase using the captured handshake

Scan the network for open ports on the access point

Perform a deauthentication attack to capture more handshakes

Set up an evil twin AP to capture credentials

A security consultant is tasked with mapping all wireless networks within a corporate campus to identify unauthorized access points. The consultant needs to passively discover networks and capture their SSIDs, channels, and encryption types without sending any probe requests that could alert the target. Which tool and approach should the consultant use?

Use airodump-ng with the --band abg flag to actively associate with each AP and read its configuration.

Use NetStumbler to actively scan and send probe requests to discover nearby networks.

Use Wireshark in managed mode to capture 802.11 management frames from the default interface.

Use Kismet in monitor mode to passively log beacon and probe-response frames.

A penetration tester is following a systematic wireless hacking methodology. The tester has already identified the target network using a wireless scanner. Which step should the tester perform next according to the methodology?

Immediately attempt to crack the WPA2 key using a dictionary attack

Set up an evil twin access point to capture credentials

Capture and analyze wireless traffic to identify the encryption method and potential vulnerabilities

Launch a deauthentication attack to disconnect all clients

A security analyst is performing a wireless security assessment and needs to capture unencrypted traffic from a public Wi-Fi network to demonstrate the risk of data exposure. The analyst has a wireless adapter that supports monitor mode. Which tool should the analyst use to capture the traffic?

Use NetStumbler to capture packets and display the SSID and channel.

Use Wireshark in monitor mode to capture and analyze packets from the network.

Use aircrack-ng to capture packets and crack the encryption key.

Use Kismet to capture packets and display the SSID and channel.

EC-CouncilCertified Ethical Hacker

Domain 6Objective 2

Wireless Hacking Methodology CEH Practice Questions (Page 4)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

11concepts

Questions 16–20

16expert · medium
A penetration tester is following a systematic wireless hacking methodology. The tester has completed network discovery and traffic analysis, and has identified that the target network uses WPA2-PSK. The tester has also captured a four-way handshake. Which step should the tester perform next?
Select an answer first
17application · medium
A security consultant is tasked with mapping all wireless networks within a corporate campus to identify unauthorized access points. The consultant needs to passively discover networks and capture their SSIDs, channels, and encryption types without sending any probe requests that could alert the target. Which tool and approach should the consultant use?
Select an answer first
18foundation · easy
During the wireless network discovery phase, a security tester uses a tool that passively listens for beacon frames and probe responses to identify nearby access points and their SSIDs. Which tool is specifically designed for this type of wireless network discovery?
Select an answer first
19application · medium
A penetration tester is following a systematic wireless hacking methodology. The tester has already identified the target network using a wireless scanner. Which step should the tester perform next according to the methodology?
Select an answer first
20application · easy
A security analyst is performing a wireless security assessment and needs to capture unencrypted traffic from a public Wi-Fi network to demonstrate the risk of data exposure. The analyst has a wireless adapter that supports monitor mode. Which tool should the analyst use to capture the traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wireless Hacking Methodology CEH Practice Questions (Page 4)

Questions 16–20

A penetration tester is following a systematic wireless hacking methodology. The tester has completed network discovery and traffic analysis, and has identified that the target network uses WPA2-PSK. The tester has also captured a four-way handshake. Which step should the tester perform next?

During the wireless network discovery phase, a security tester uses a tool that passively listens for beacon frames and probe responses to identify nearby access points and their SSIDs. Which tool is specifically designed for this type of wireless network discovery?

A penetration tester is following a systematic wireless hacking methodology. The tester has already identified the target network using a wireless scanner. Which step should the tester perform next according to the methodology?

A security analyst is performing a wireless security assessment and needs to capture unencrypted traffic from a public Wi-Fi network to demonstrate the risk of data exposure. The analyst has a wireless adapter that supports monitor mode. Which tool should the analyst use to capture the traffic?

Keep studying — Wireless Network Hacking