A small retail store has been using WEP for years because their legacy barcode scanners only support WEP. A security consultant explains that WEP is fundamentally broken and demonstrates how easily an attacker can recover the key. The store owner asks why WEP is so weak. Which combination of design flaws is the primary reason WEP is considered cryptographically broken?

Use of a 128-bit key that is derived from a passphrase, combined with a weak key derivation function

Use of a 64-bit key that is too short, combined with a block cipher that is vulnerable to birthday attacks

Use of a 24-bit IV that is reused frequently, combined with RC4 stream cipher weaknesses and no strong integrity check

Use of a static pre-shared key that is never rotated, combined with a lack of any authentication mechanism

An organization is planning to upgrade its wireless network. The current access points support WPA with TKIP, but the security policy requires AES-CCMP encryption. What should the organization do to meet this requirement?

Use WPA with a longer pre-shared key to emulate AES strength

Continue using WPA with TKIP but increase the passphrase length

Enable WPA2 on the access points even if they only support TKIP

Replace the access points with models that support WPA2 with AES-CCMP

A company is planning to upgrade its wireless network from WPA to WPA2. The network has some older IoT devices that only support WPA. The IT manager wants to maximize security while maintaining compatibility. Which approach should the company take?

Use WPA2 with TKIP as the encryption method to maintain compatibility

Deploy WPA2 on the main network and create a separate SSID with WPA for the legacy IoT devices

Keep the entire network on WPA to ensure compatibility with all devices

Upgrade the firmware on the IoT devices to support WPA2

A security consultant is assessing a WEP network that uses a 128-bit key. The consultant captures packets and uses Aircrack-ng to recover the key. The attack succeeds after collecting about 50,000 IVs. Which factor most directly contributed to the success of this attack?

The 128-bit key is too short to resist brute-force attacks

The 24-bit IV space is small enough that IV collisions occur frequently, enabling statistical key recovery

The access point is broadcasting the key in its beacon frames

The use of Open System authentication allows the attacker to capture the key directly

EC-CouncilIoT Security Essentials

Domain 4Objective 3

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 5)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

12concepts

Questions 21–25

21application · medium
A small retail store has been using WEP for years because their legacy barcode scanners only support WEP. A security consultant explains that WEP is fundamentally broken and demonstrates how easily an attacker can recover the key. The store owner asks why WEP is so weak. Which combination of design flaws is the primary reason WEP is considered cryptographically broken?
Select an answer first
22foundation · easy
Which protocol is the core encryption mechanism of WPA?
Select an answer first
23application · medium
An organization is planning to upgrade its wireless network. The current access points support WPA with TKIP, but the security policy requires AES-CCMP encryption. What should the organization do to meet this requirement?
Select an answer first
24expert · hard
A company is planning to upgrade its wireless network from WPA to WPA2. The network has some older IoT devices that only support WPA. The IT manager wants to maximize security while maintaining compatibility. Which approach should the company take?
Select an answer first
25expert · hard
A security consultant is assessing a WEP network that uses a 128-bit key. The consultant captures packets and uses Aircrack-ng to recover the key. The attack succeeds after collecting about 50,000 IVs. Which factor most directly contributed to the success of this attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 5)

Questions 21–25

Which protocol is the core encryption mechanism of WPA?

An organization is planning to upgrade its wireless network. The current access points support WPA with TKIP, but the security policy requires AES-CCMP encryption. What should the organization do to meet this requirement?

A company is planning to upgrade its wireless network from WPA to WPA2. The network has some older IoT devices that only support WPA. The IT manager wants to maximize security while maintaining compatibility. Which approach should the company take?

A security consultant is assessing a WEP network that uses a 128-bit key. The consultant captures packets and uses Aircrack-ng to recover the key. The attack succeeds after collecting about 50,000 IVs. Which factor most directly contributed to the success of this attack?

Keep studying — IoT Threats and Basic Security