A small retail store has been using WEP for years. The owner notices that an attacker is capturing packets and quickly recovering the network key. The attacker appears to be exploiting the fact that many data packets share the same 24-bit value prepended to the RC4 key. Which WEP design flaw is being directly exploited?

WEP does not include any integrity check, so the attacker can modify packets and recover the key.

WEP uses a 64-bit key, which is too short for any modern encryption standard.

The RC4 algorithm is inherently broken and cannot provide any confidentiality even with unique IVs.

The 24-bit IV is too short and gets reused, enabling statistical attacks to recover the key.

A penetration tester is evaluating a WEP network. The tester captures packets and notices that the access point is using a weak IV that is known to be vulnerable to the FMS attack. Which action should the tester take to exploit this vulnerability?

Send deauthentication frames to force clients to reconnect and capture the four-way handshake

Use a dictionary attack against the WEP key by capturing the authentication challenge

Collect a large number of packets with the same weak IV and use Aircrack-ng to recover the key

Exploit the TKIP MIC countermeasure to cause a denial of service

A university wants to deploy WPA for its campus Wi-Fi. The IT team needs to authenticate each student individually and revoke access when a student graduates. Which authentication mode should they choose, and why?

WPA-Enterprise with a static WEP key, because it is compatible with legacy devices

WPA-Personal with a shared passphrase, because it is simpler and does not require a RADIUS server

WPA-Enterprise with 802.1X and RADIUS, because it supports individual credentials and centralized access control

WPA-Personal with a unique passphrase per student, because it provides individual accountability

EC-CouncilIoT Security Essentials

Domain 4Objective 3

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 1)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

12concepts

Questions 1–5

1application · medium
A small retail store has been using WEP for years. The owner notices that an attacker is capturing packets and quickly recovering the network key. The attacker appears to be exploiting the fact that many data packets share the same 24-bit value prepended to the RC4 key. Which WEP design flaw is being directly exploited?
Select an answer first
2foundation · easy
Which encryption protocol is used in WPA2?
Select an answer first
3expert · hard
A penetration tester is evaluating a WEP network. The tester captures packets and notices that the access point is using a weak IV that is known to be vulnerable to the FMS attack. Which action should the tester take to exploit this vulnerability?
Select an answer first
4application · medium
A university wants to deploy WPA for its campus Wi-Fi. The IT team needs to authenticate each student individually and revoke access when a student graduates. Which authentication mode should they choose, and why?
Select an answer first
5foundation · easy
Which tool is commonly used to crack WEP keys by capturing packets and performing statistical attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 1)

Questions 1–5

Which encryption protocol is used in WPA2?

A penetration tester is evaluating a WEP network. The tester captures packets and notices that the access point is using a weak IV that is known to be vulnerable to the FMS attack. Which action should the tester take to exploit this vulnerability?

A university wants to deploy WPA for its campus Wi-Fi. The IT team needs to authenticate each student individually and revoke access when a student graduates. Which authentication mode should they choose, and why?

Which tool is commonly used to crack WEP keys by capturing packets and performing statistical attacks?

Keep studying — IoT Threats and Basic Security