Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What was the primary purpose of Wired Equivalent Privacy (WEP) when it was introduced for Wi-Fi networks?

   • ATo provide a fast roaming mechanism for mobile devices
   • BTo authenticate users with a central RADIUS server
   • CTo replace all wired network connections with wireless ones
   • DTo provide wireless security comparable to the privacy and integrity of a wired network
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A security analyst is assessing a legacy IoT deployment that still uses WEP. The analyst captures traffic and notices that many data packets share the same initialization vector (IV). The analyst plans to use Aircrack-ng to recover the WEP key. Why does the observation of repeated IVs make the attack faster?

   • ARepeated IVs produce identical keystreams, and collecting enough of them lets the attacker statistically recover the RC4 key
   • BRepeated IVs cause the access point to reveal the key in its beacon frames
   • CRepeated IVs indicate that the network is using a weak key, which can be guessed from a dictionary
   • DRepeated IVs allow the attacker to bypass authentication and join the network without a key
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A network administrator is investigating a possible attack on a WPA network. The administrator notices that the access point has temporarily disabled the network after detecting multiple MIC failures. What is the most likely cause of this behavior?

   • AThe RADIUS server is overloaded and is rejecting authentication requests
   • BThe access point is performing a firmware update and temporarily disables the network
   • CA client is using an incorrect WEP key, causing repeated authentication failures
   • DAn attacker is attempting to exploit the TKIP Michael MIC vulnerability, which triggers countermeasures after two failed MIC checks
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security team is assessing a WPA network that uses TKIP. They are concerned about the Michael MIC vulnerability, which allows an attacker to forge packets and potentially recover the MIC key. The team wants to mitigate this risk without upgrading to WPA2. Which mitigation is most effective?

   • AUse a longer pre-shared key to prevent dictionary attacks.
   • BDisable TKIP and use WEP with a longer key.
   • CEnable MIC countermeasures, which temporarily shut down the network for 60 seconds after two MIC failures.
   • DIncrease the TKIP key length from 128 to 256 bits.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A hospital is deploying WPA-Enterprise for its staff Wi-Fi. The IT team wants to ensure that only authorized staff can connect and that access can be revoked immediately when an employee leaves. Which configuration is essential to achieve this?

   • AUse a strong pre-shared key and change it monthly
   • BIntegrate the RADIUS server with the hospital's Active Directory to authenticate users against their domain credentials
   • CUse WPA-Personal with a unique passphrase for each department
   • DEnable MAC address filtering on the access points
   Reveal Solution Discussion Select an answer first