A company is using WPA-Personal with a 10-character passphrase that is a common English word followed by four digits. An attacker captures the four-way handshake and successfully cracks the passphrase in a few hours. Which mitigation would be most effective to prevent this type of attack?

Enable MAC address filtering to only allow known devices

Change the passphrase to a 20-character random string of letters, numbers, and symbols

Switch from WPA-Personal to WPA-Enterprise with a RADIUS server

Reduce the transmit power of the access point to limit the range of the Wi-Fi signal

A company is migrating from WEP to WPA for its legacy IoT sensors that do not support WPA2. The network administrator wants to understand how WPA improves upon WEP. Which statement accurately describes a key improvement of WPA over WEP?

WPA uses a 128-bit key that is never reused, making it immune to all dictionary attacks

WPA uses AES-CCMP, which is a stronger block cipher that completely eliminates the need for key rotation

WPA uses a longer IV of 48 bits, which completely eliminates the possibility of IV collisions

WPA uses TKIP with per-packet key mixing and a message integrity check (MIC) to prevent IV reuse and detect tampering

A network engineer is explaining WEP encryption to a junior technician. The engineer says that WEP uses RC4 with a 24-bit IV. Which statement correctly describes how the IV is used in WEP encryption?

The IV is used as the RC4 key, and the secret key is used only for authentication

The IV is encrypted with the secret key and sent separately to the receiver

The IV is concatenated with the secret key to create the RC4 seed, and the IV is transmitted in cleartext

The IV is derived from the data packet and is not transmitted

A hospital is upgrading its wireless network from WPA to WPA2. The IT director asks why WPA2 is necessary when WPA already fixed WEP's problems. Which reason best explains the transition to WPA2?

WPA2 uses a longer RC4 key, making it resistant to all known attacks

WPA2 eliminates the need for a pre-shared key, making authentication completely passwordless

WPA2 increases the IV size to 128 bits, making IV collisions impossible

WPA2 replaces TKIP with AES-CCMP, providing stronger encryption and addressing the known weaknesses in TKIP

EC-CouncilIoT Security Essentials

Domain 4Objective 3

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 2)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

12concepts

Questions 6–10

6expert · hard
A company is using WPA-Personal with a 10-character passphrase that is a common English word followed by four digits. An attacker captures the four-way handshake and successfully cracks the passphrase in a few hours. Which mitigation would be most effective to prevent this type of attack?
Select an answer first
7application · medium
A company is migrating from WEP to WPA for its legacy IoT sensors that do not support WPA2. The network administrator wants to understand how WPA improves upon WEP. Which statement accurately describes a key improvement of WPA over WEP?
Select an answer first
8foundation · easy
What is the effective key length of a 64-bit WEP key?
Select an answer first
9application · medium
A network engineer is explaining WEP encryption to a junior technician. The engineer says that WEP uses RC4 with a 24-bit IV. Which statement correctly describes how the IV is used in WEP encryption?
Select an answer first
10application · medium
A hospital is upgrading its wireless network from WPA to WPA2. The IT director asks why WPA2 is necessary when WPA already fixed WEP's problems. Which reason best explains the transition to WPA2?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.