A penetration tester is assessing a network that uses WPA2-PSK with WPS enabled. The tester has captured a valid handshake but the password is not in the current wordlist. The tester wants to gain access without performing a lengthy dictionary attack. Which attack should the tester prioritize?

Use aircrack-ng to run a rule-based attack on the captured handshake.

Use an evil twin attack to capture the WPS PIN from the client.

Use a deauthentication attack to force a client to reconnect and capture a new handshake.

Use Reaver to brute-force the WPS PIN and recover the PSK.

EC-CouncilCertified Ethical Hacker

Domain 6Objective 2

Wireless Hacking Methodology CEH Practice Questions (Page 5)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

11concepts

Questions 21–25

21foundation · easy
Which phase of the wireless hacking methodology involves actively probing the target network to identify connected clients and the access point's capabilities?
Select an answer first
22foundation · easy
Which tool is commonly used to capture and analyze wireless packets in real time, allowing a tester to inspect individual frames?
Select an answer first
23expert · hard
A penetration tester is assessing a network that uses WPA2-PSK with WPS enabled. The tester has captured a valid handshake but the password is not in the current wordlist. The tester wants to gain access without performing a lengthy dictionary attack. Which attack should the tester prioritize?
Select an answer first
24foundation · easy
An attacker changes the MAC address of their wireless adapter to match an authorized device's MAC address. What is this technique called?
Select an answer first
25foundation · easy
Which tool is specifically designed to crack WEP and WPA/WPA2 keys by capturing packets and performing cryptanalysis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wireless Hacking Methodology CEH Practice Questions (Page 5)

Questions 21–25

Which phase of the wireless hacking methodology involves actively probing the target network to identify connected clients and the access point's capabilities?

Which tool is commonly used to capture and analyze wireless packets in real time, allowing a tester to inspect individual frames?

A penetration tester is assessing a network that uses WPA2-PSK with WPS enabled. The tester has captured a valid handshake but the password is not in the current wordlist. The tester wants to gain access without performing a lengthy dictionary attack. Which attack should the tester prioritize?

An attacker changes the MAC address of their wireless adapter to match an authorized device's MAC address. What is this technique called?

Which tool is specifically designed to crack WEP and WPA/WPA2 keys by capturing packets and performing cryptanalysis?

Keep studying — Wireless Network Hacking