Wireless Network Security and Attack Techniques EHE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a recommended countermeasure to reduce the risk of deauthentication attacks?

   • AIncreasing transmit power
   • BUsing WPA3 with PMF (Protected Management Frames)
   • CDisabling SSID broadcast
   • DUsing WEP encryption
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network administrator is setting up a wireless network for a small office and wants to ensure that only authorized employees can connect. The office has 15 employees, each with a company-issued laptop. Which authentication method provides the best balance of security and manageability for this environment?

   • AWPA2-Enterprise with 802.1X and individual user credentials
   • BOpen network with MAC address filtering
   • CWEP with a 128-bit key
   • DWPA2-PSK with a strong shared passphrase
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An attacker is attempting to capture the WPA2 four-way handshake by sending deauthentication frames to a client. The attacker then plans to run an offline dictionary attack. Which of the following is the most effective defense against this specific attack chain?

   • AEnable MAC filtering.
   • BDisable SSID broadcasting.
   • CUse a strong, random passphrase that is not in any dictionary.
   • DUse WPA2-TKIP instead of WPA2-AES.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A penetration tester is assessing a wireless network that uses WPA2-Enterprise with PEAP-MSCHAPv2. The tester has captured a successful authentication exchange from a legitimate user. Which attack can the tester perform to recover the user's credentials?

   • AReplay the captured authentication exchange to gain access.
   • BOffline dictionary attack against the captured MSCHAPv2 challenge-response.
   • CUse a deauthentication attack to force a reconnection and capture the handshake.
   • DPerform a WPS PIN attack to recover the network key.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security auditor is evaluating the wireless security of a small business that uses WPA2-PSK. The auditor discovers that the PSK is a common dictionary word. The business owner wants to improve security without replacing the access points. Which action would most effectively mitigate the risk of the PSK being cracked?

   • ADisable SSID broadcast to hide the network.
   • BEnable WPS to simplify device connection.
   • CUse MAC address filtering to allow only known devices.
   • DChange the PSK to a long, random string of characters.
   Reveal Solution Discussion Select an answer first