A security team is investigating a series of wireless attacks. They notice that clients are being disconnected from the corporate Wi-Fi and reconnecting to a rogue AP with the same SSID. The rogue AP is then capturing credentials. Which attack is being used?

Evil twin attack combined with a deauthentication attack

A company has a wireless network that uses WPA2-Personal with a shared passphrase. The security team wants to implement a solution that prevents offline dictionary attacks and provides per-user accountability. However, the company has many legacy IoT devices that do not support 802.1X. Which approach best balances security and compatibility?

Continue using WPA2-Personal with a strong passphrase

Disable wireless for legacy IoT devices

Upgrade all devices to support WPA3-Enterprise

Deploy WPA3-Personal with SAE for modern devices and create a separate SSID with WPA2-Personal for legacy IoT devices

A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP-MSCHAPv2. The tester has captured a client's authentication exchange. Which attack is most feasible against this configuration?

Evil twin attack to capture the user's credentials in clear text

Offline dictionary attack against the MSCHAPv2 challenge-response to recover the user's password

Deauthentication attack to force the client to reconnect and capture the four-way handshake

WPS PIN attack to recover the pre-shared key

EC-CouncilCertified Security Specialist

Domain 4Objective 3

Wireless Attacks and Countermeasures ECSS Practice Questions (Page 6)

Part of the Ethical Hacking Advanced Attacks and Penetration Testing domain, which makes up ~17% of our current practice bank.

39questions here

8free pages

6concepts

Questions 26–30

26expert · hard
A security team is investigating a series of wireless attacks. They notice that clients are being disconnected from the corporate Wi-Fi and reconnecting to a rogue AP with the same SSID. The rogue AP is then capturing credentials. Which attack is being used?
Select an answer first
27expert · hard
A penetration tester is performing a wireless assessment and needs to capture packets for analysis. The tester wants to identify the encryption type used by a target access point. Which tool is most appropriate for this task?
Select an answer first
28expert · hard
A company has a wireless network that uses WPA2-Personal with a shared passphrase. The security team wants to implement a solution that prevents offline dictionary attacks and provides per-user accountability. However, the company has many legacy IoT devices that do not support 802.1X. Which approach best balances security and compatibility?
Select an answer first
29expert · hard
A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP-MSCHAPv2. The tester has captured a client's authentication exchange. Which attack is most feasible against this configuration?
Select an answer first
30foundation · easy
An attacker sets up a rogue access point with the same SSID as a legitimate network and places it closer to the victim. This type of attack is best described as which of the following?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Wireless Attacks and Countermeasures ECSS Practice Questions (Page 6)

Questions 26–30

A security team is investigating a series of wireless attacks. They notice that clients are being disconnected from the corporate Wi-Fi and reconnecting to a rogue AP with the same SSID. The rogue AP is then capturing credentials. Which attack is being used?

A penetration tester is performing a wireless assessment and needs to capture packets for analysis. The tester wants to identify the encryption type used by a target access point. Which tool is most appropriate for this task?

A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP-MSCHAPv2. The tester has captured a client's authentication exchange. Which attack is most feasible against this configuration?

An attacker sets up a rogue access point with the same SSID as a legitimate network and places it closer to the victim. This type of attack is best described as which of the following?

Keep studying — Ethical Hacking Advanced Attacks and Penetration Testing