You are planning a wireless penetration test for a facility that uses both 2.4 GHz and 5 GHz bands. You need to ensure your wireless adapter supports both bands and can perform packet injection. What should you verify before starting the test?

The adapter is compatible with Windows.

The adapter has an external antenna for better range.

The adapter supports WPA3 encryption.

The adapter supports monitor mode and packet injection on both 2.4 GHz and 5 GHz.

You are planning a wireless penetration test for a client with multiple sites. The client wants a comprehensive test but has a limited budget. Which approach best balances coverage and cost?

Use automated tools to test all sites without manual analysis.

Skip the site survey and only test the headquarters site.

Perform active attacks at all sites to ensure thorough testing.

Conduct a passive site survey at all sites, then perform active attacks only at the highest-risk sites.

A client has a WPA2-PSK network with WPS enabled. You are testing the network and want to recover the WPS PIN. You have a tool that can perform an online brute-force attack against the WPS PIN. The access point has lockout protection that locks after 5 failed attempts. What is the most effective way to bypass the lockout and recover the PIN?

Deauthenticate the access point to reset the lockout counter.

Use a dictionary attack against the WPS PIN.

Wait for the lockout period to expire and then continue the brute-force attack.

Use the 'pixie dust' attack to recover the PIN offline from the access point's PBC response.

EC-CouncilCertified Penetration Testing Professional

Domain 7Objective 1

Wireless Penetration Testing CPENT Practice Questions (Page 8)

Part of the Specialized Testing and Reporting domain, which makes up ~23% of our current practice bank.

50questions here

10free pages

10concepts

Questions 36–40

36application · medium
You are planning a wireless penetration test for a facility that uses both 2.4 GHz and 5 GHz bands. You need to ensure your wireless adapter supports both bands and can perform packet injection. What should you verify before starting the test?
Select an answer first
37foundation · easy
Which tool is commonly used to perform a brute-force attack against the WPS PIN?
Select an answer first
38expert · hard
You are planning a wireless penetration test for a client with multiple sites. The client wants a comprehensive test but has a limited budget. Which approach best balances coverage and cost?
Select an answer first
39application · medium
A client has a WPA2-PSK network with WPS enabled. You are testing the network and want to recover the WPS PIN. You have a tool that can perform an online brute-force attack against the WPS PIN. The access point has lockout protection that locks after 5 failed attempts. What is the most effective way to bypass the lockout and recover the PIN?
Select an answer first
40application · easy
You are conducting a wireless site survey for a penetration test. You need to identify all access points and their channels, encryption types, and client counts. You have a wireless adapter that supports monitor mode. Which tool should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Wireless Penetration Testing CPENT Practice Questions (Page 8)

Questions 36–40

You are planning a wireless penetration test for a facility that uses both 2.4 GHz and 5 GHz bands. You need to ensure your wireless adapter supports both bands and can perform packet injection. What should you verify before starting the test?

Which tool is commonly used to perform a brute-force attack against the WPS PIN?

You are planning a wireless penetration test for a client with multiple sites. The client wants a comprehensive test but has a limited budget. Which approach best balances coverage and cost?

You are conducting a wireless site survey for a penetration test. You need to identify all access points and their channels, encryption types, and client counts. You have a wireless adapter that supports monitor mode. Which tool should you use?

Keep studying — Specialized Testing and Reporting