You are testing a WEP network and have captured a large number of IVs. You run aircrack-ng, but it fails to recover the key. The access point is using 128-bit WEP. What is the most likely reason for the failure?

The access point has WPS enabled, which interferes with WEP cracking.

The access point is using WPA2 instead of WEP.

You are using the wrong channel; you need to switch to channel 6.

You did not capture enough IVs; 128-bit WEP requires more IVs than 64-bit WEP.

What is the primary purpose of the reporting phase in a wireless penetration test?

To capture the WPA handshake for offline cracking

To document findings, evidence, and remediation recommendations for the client

To deauthenticate all clients from the network

To set up a rogue access point for credential harvesting

You are performing a wireless client attack to capture WPA2 handshakes from a network that has no active clients. You need to obtain a handshake to attempt offline cracking. What is the most effective technique?

Send deauthentication frames to the broadcast address to force any client to reconnect.

Use a dictionary attack against the AP's SSID.

Use a rogue AP with the same SSID to capture the passphrase.

Perform a WPS PIN attack to retrieve the passphrase directly.

EC-CouncilCertified Penetration Testing Professional

Domain 7Objective 1

Wireless Penetration Testing CPENT Practice Questions (Page 5)

Part of the Specialized Testing and Reporting domain, which makes up ~23% of our current practice bank.

50questions here

10free pages

10concepts

Questions 21–25

21application · medium
You are testing a WEP network and have captured a large number of IVs. You run aircrack-ng, but it fails to recover the key. The access point is using 128-bit WEP. What is the most likely reason for the failure?
Select an answer first
22foundation · easy
What is the primary purpose of the reporting phase in a wireless penetration test?
Select an answer first
23foundation · easy
Which tool is specifically designed to crack WPA/WPA2 handshakes by performing dictionary or brute-force attacks on the captured handshake?
Select an answer first
24application · medium
You are performing a wireless client attack to capture WPA2 handshakes from a network that has no active clients. You need to obtain a handshake to attempt offline cracking. What is the most effective technique?
Select an answer first
25foundation · easy
When using airodump-ng to perform wireless reconnaissance, which column in the output displays the unique identifier of each access point?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Wireless Penetration Testing CPENT Practice Questions (Page 5)

Questions 21–25

You are testing a WEP network and have captured a large number of IVs. You run aircrack-ng, but it fails to recover the key. The access point is using 128-bit WEP. What is the most likely reason for the failure?

What is the primary purpose of the reporting phase in a wireless penetration test?

Which tool is specifically designed to crack WPA/WPA2 handshakes by performing dictionary or brute-force attacks on the captured handshake?

You are performing a wireless client attack to capture WPA2 handshakes from a network that has no active clients. You need to obtain a handshake to attempt offline cracking. What is the most effective technique?

When using airodump-ng to perform wireless reconnaissance, which column in the output displays the unique identifier of each access point?

Keep studying — Specialized Testing and Reporting