Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A security consultant is assessing a legacy IoT deployment that still uses WEP. The consultant captures packets and notices that many packets have the same IV. To speed up the key recovery, the consultant injects new packets into the network to generate more traffic with predictable IVs. Which attack technique is the consultant using?

   • AA denial-of-service attack to force clients to reconnect and reveal the key in the authentication process.
   • BPacket injection to force IV reuse and collect enough weak IVs for a statistical key recovery.
   • CA dictionary attack against the WEP passphrase to guess the shared key.
   • DA man-in-the-middle attack to intercept the four-way handshake and derive the key.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which of the following is a key improvement of WPA over WEP?

   • AWPA does not require any configuration on clients
   • BWPA provides per-packet key mixing and a message integrity check
   • CWPA uses a 128-bit key that is impossible to crack
   • DWPA uses AES encryption, which is stronger than RC4
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A network administrator is troubleshooting a WPA network that uses TKIP. The administrator notices that the network periodically shuts down for 60 seconds. The administrator suspects that the Michael MIC countermeasures are being triggered. What is the most likely cause of this behavior?

   • AThe network is experiencing interference from other wireless devices.
   • BThe access point is overheating and rebooting.
   • CThe pre-shared key is being changed automatically.
   • DAn attacker is attempting to forge packets and is causing MIC failures.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Why was Wi-Fi Protected Access (WPA) introduced?

   • ATo provide a long-term replacement for WEP with a completely new encryption algorithm
   • BTo increase the WEP key length from 64 to 128 bits
   • CTo offer an immediate, software-upgradable fix for WEP's vulnerabilities while the IEEE finalized a new standard
   • DTo provide a proprietary security solution for enterprise networks only
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   What is a major weakness of WEP's Shared Key authentication compared to Open System?

   • AIt is more susceptible to denial-of-service attacks
   • BIt does not actually authenticate the client at all
   • CIt exposes the WEP key to attackers who capture the challenge and response
   • DIt requires a RADIUS server, which is complex to set up
   Reveal Solution Discussion Select an answer first