Wireless Network Security and Attack Techniques EHE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security consultant is reviewing a client's wireless security posture. The client currently uses WEP for legacy devices. The consultant recommends upgrading. Which of the following is the primary reason WEP is considered insecure, and what is the minimum recommended replacement?

   • AWEP uses a static 64-bit or 128-bit key that can be recovered by capturing enough IVs; replace with WPA2 or WPA3.
   • BWEP does not support authentication; replace with WPA-PSK.
   • CWEP is vulnerable to dictionary attacks on the passphrase; replace with WPA2-PSK.
   • DWEP uses TKIP which is easily cracked; replace with WPA3-SAE.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A network administrator notices that several wireless clients are repeatedly disconnecting and reconnecting to the corporate network. The administrator suspects a deauthentication attack. Which tool would an attacker most likely use to send forged deauthentication frames, and what countermeasure would be most effective?

   • AWireshark to send deauth frames; enable MAC filtering.
   • BAircrack-ng suite (aireplay-ng) to send deauth frames; implement 802.11w (PMF) on the access points.
   • CKismet to send deauth frames; enable WPA3-SAE on the network.
   • DReaver to send deauth frames; disable SSID broadcasting.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A hospital is deploying a wireless network for patient monitoring devices that transmit sensitive health data. The devices only support WPA2-PSK. The security team is concerned about the risk of an attacker cracking the PSK and accessing the network. Which approach provides the strongest security while maintaining compatibility with the devices?

   • AUse a short, memorable PSK to simplify device configuration.
   • BUse WPA2-PSK with TKIP instead of AES to improve compatibility.
   • CUse a long, random PSK and place the devices on a separate VLAN with strict firewall rules.
   • DDisable encryption and rely on the physical security of the hospital.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security analyst is performing a wireless penetration test. The analyst needs to capture packets from a target network that uses WPA2-PSK. The analyst has a wireless adapter that supports monitor mode. Which tool should the analyst use to capture the four-way handshake?

   • AKismet
   • BNmap
   • CReaver
   • DAirodump-ng
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company has a wireless network with WPA2-PSK. The security team wants to prevent deauthentication attacks and also wants to support legacy devices that do not support 802.11w. The team is considering upgrading to WPA3. Which approach best addresses the security concern while maintaining compatibility?

   • AKeep WPA2-PSK and disable SSID broadcasting.
   • BEnable WPA3-Personal only, forcing all devices to support WPA3 and PMF.
   • CKeep WPA2-PSK and enable 802.11w on the access points.
   • DEnable WPA3-Personal in transition mode, which allows WPA2 devices to connect and enables PMF for WPA3-capable devices.
   Reveal Solution Discussion Select an answer first