Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company is planning to upgrade from WEP to WPA for its legacy devices. The IT manager asks why WPA was created instead of immediately moving to WPA2. Which reason best explains the introduction of WPA?

   • AWPA was created to support only enterprise authentication, leaving personal users without security
   • BWPA was created to replace the need for encryption entirely, relying on network isolation
   • CWPA was an interim solution that could be implemented on existing WEP hardware with a firmware upgrade
   • DWPA was created to add new features like guest networking and quality of service
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security analyst is investigating a WPA-Personal network that was compromised. The analyst discovers that the attacker captured the four-way handshake and then successfully guessed the passphrase using a wordlist. Which WPA weakness was exploited?

   • ATKIP Michael MIC vulnerability allowing packet injection
   • BLack of integrity protection allowing packet modification
   • COffline dictionary attack against a weak pre-shared key
   • DIV collision attack due to short IVs
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the purpose of the 24-bit initialization vector (IV) in WEP encryption?

   • ATo provide integrity checking of the data
   • BTo provide a unique keystream for each packet by varying the RC4 key
   • CTo increase the effective key length to 128 bits
   • DTo authenticate the access point to the client
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company is planning to upgrade from WEP to a more secure protocol, but the budget is limited and the existing hardware is old. The administrator needs a solution that can be implemented with a firmware upgrade and does not require new hardware. Which protocol should the administrator choose?

   • AContinue using WEP but with a longer key
   • BWPA2 with AES-CCMP
   • CWPA3 with SAE
   • DWPA with TKIP
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is an IV collision attack against WEP?

   • AAn attacker sends a deauthentication frame to disconnect clients
   • BAn attacker floods the network with packets that have the same IV
   • CAn attacker exploits a buffer overflow in the access point
   • DAn attacker guesses the WEP key by trying all possible combinations
   Reveal Solution Discussion Select an answer first