In WEP's Open System authentication, what does the client do to authenticate?

It simply requests authentication and the access point grants it without verifying a key

It must present a digital certificate

It must prove knowledge of the WEP key by decrypting a random challenge

It sends a challenge encrypted with the WEP key

A company is using WPA-Enterprise with 802.1X and RADIUS. The security team is concerned about the risk of offline dictionary attacks on the pre-shared key. However, the network uses 802.1X, which does not rely on a pre-shared key. Which statement correctly addresses this concern?

WPA-Enterprise is vulnerable to offline dictionary attacks if the access point uses a weak pre-shared key for the SSID.

WPA-Enterprise is still vulnerable to offline dictionary attacks if the RADIUS server uses a weak shared secret.

WPA-Enterprise is not vulnerable to offline dictionary attacks on a PSK because authentication uses per-user credentials via 802.1X.

WPA-Enterprise uses a pre-shared key that is derived from the user's password, making it vulnerable to dictionary attacks.

A company is upgrading from WEP to WPA to improve security without replacing older IoT devices that only support RC4. The administrator wants to ensure that each packet is encrypted with a different key and that the integrity check is stronger than WEP's. Which WPA feature directly addresses these requirements?

TKIP with per-packet key mixing and Michael MIC

802.1X authentication with RADIUS

What is the purpose of per-packet key mixing in TKIP?

To compress the data before encryption

To encrypt the packet with a different cipher for each packet

To authenticate the access point to the client

To generate a unique RC4 key for each packet, preventing keystream reuse

Compared to WEP, how does WPA handle key management?

WPA uses static keys that are manually configured on each device

WPA uses the same key for all devices on the network

WPA does not use any keys; it relies on MAC address filtering

WPA uses dynamic per-session keys that are established through a handshake

EC-CouncilIoT Security Essentials

Domain 4Objective 3

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 6)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

12concepts

Questions 26–30

26foundation · easy
In WEP's Open System authentication, what does the client do to authenticate?
Select an answer first
27expert · hard
A company is using WPA-Enterprise with 802.1X and RADIUS. The security team is concerned about the risk of offline dictionary attacks on the pre-shared key. However, the network uses 802.1X, which does not rely on a pre-shared key. Which statement correctly addresses this concern?
Select an answer first
28application · medium
A company is upgrading from WEP to WPA to improve security without replacing older IoT devices that only support RC4. The administrator wants to ensure that each packet is encrypted with a different key and that the integrity check is stronger than WEP's. Which WPA feature directly addresses these requirements?
Select an answer first
29foundation · easy
What is the purpose of per-packet key mixing in TKIP?
Select an answer first
30foundation · easy
Compared to WEP, how does WPA handle key management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.