A hospital is deploying a wireless network for patient monitoring devices. The network must support legacy devices that only support WPA2, but the security team wants to implement the strongest possible authentication. Which combination of settings should the administrator use?

WPA2-Enterprise with 802.1X authentication and AES encryption

WPA2-Personal with a long passphrase

A user reports that their Bluetooth speaker sometimes connects to an unknown device and plays audio without the user's action. The user's phone is paired with the speaker, but the speaker is also in pairing mode. Which Bluetooth weakness is most likely being exploited?

Pairing mode left enabled, allowing unauthorized pairing

Bluejacking sending unsolicited messages

The speaker's firmware is outdated

Weak encryption on the Bluetooth link

What is a key security improvement of WPA3 over WPA2?

WPA3 has no authentication mechanism

WPA3 provides forward secrecy and protects against offline dictionary attacks

WPA3 uses a static pre-shared key (PSK) for all connections

An employee frequently uses a Bluetooth keyboard with their laptop in a busy café. The employee is concerned about someone intercepting keystrokes. Which countermeasure is the most effective?

Set the keyboard to non-discoverable mode

Place the keyboard in a Faraday bag while typing

A user at a coffee shop connects to the Wi-Fi network named 'CoffeeShop_Free'. The user later discovers that their credentials were stolen. The attacker had set up a wireless access point with the same SSID and no encryption, while the legitimate coffee shop network uses WPA2. Which attack was used, and what is the best defense for the user?

Rogue access point; disable the SSID broadcast on the user's device

Packet sniffing; use WPA2 encryption on the user's device

Bluejacking; disable Bluetooth on the user's device

Evil twin; verify the exact SSID and use a VPN when connecting to public Wi-Fi

EC-CouncilEthical Hacking Essentials

Domain 7Objective 2

Bluetooth Threats and Wireless Security Risks EHE Practice Questions (Page 7)

Part of the Wireless, Mobile, IoT, and OT Attacks domain, which makes up ~15% of our current practice bank.

42questions here

9free pages

6concepts

Questions 31–35

31application · medium
A hospital is deploying a wireless network for patient monitoring devices. The network must support legacy devices that only support WPA2, but the security team wants to implement the strongest possible authentication. Which combination of settings should the administrator use?
Select an answer first
32application · medium
A user reports that their Bluetooth speaker sometimes connects to an unknown device and plays audio without the user's action. The user's phone is paired with the speaker, but the speaker is also in pairing mode. Which Bluetooth weakness is most likely being exploited?
Select an answer first
33foundation · easy
What is a key security improvement of WPA3 over WPA2?
Select an answer first
34application · medium
An employee frequently uses a Bluetooth keyboard with their laptop in a busy café. The employee is concerned about someone intercepting keystrokes. Which countermeasure is the most effective?
Select an answer first
35application · medium
A user at a coffee shop connects to the Wi-Fi network named 'CoffeeShop_Free'. The user later discovers that their credentials were stolen. The attacker had set up a wireless access point with the same SSID and no encryption, while the legitimate coffee shop network uses WPA2. Which attack was used, and what is the best defense for the user?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.