A security auditor is evaluating a WEP network that uses Shared Key authentication. The auditor explains that this authentication method is actually weaker than Open System authentication. Why is Shared Key authentication considered weaker?

It transmits a plaintext challenge and an encrypted response, allowing an attacker to derive the keystream.

It uses a weaker encryption algorithm than Open System authentication.

It requires the client to send its WEP key in plaintext.

It does not provide any encryption, only authentication.

In WPA-Personal (PSK) mode, how is the encryption key derived?

From a random number generated by the access point and sent to clients

From a pre-shared key (passphrase) that is manually entered on each device

From a digital certificate issued by a certificate authority

A penetration tester is assessing a legacy WEP network. The tester has captured a large number of packets but is struggling to recover the key because the network is not very active. The tester wants to accelerate the attack. Which technique would be most effective?

Perform a deauthentication attack to force clients to reconnect and capture the four-way handshake.

Inject ARP request packets to generate new IVs and increase traffic.

Exploit the Michael MIC vulnerability to inject packets.

Use a dictionary attack against the WEP passphrase.

What does the Message Integrity Check (MIC) in TKIP provide that WEP's CRC-32 did not?

A way to authenticate users with a password

A faster checksum that improves performance

A method to encrypt the packet header

A cryptographically secure integrity check that prevents tampering

EC-CouncilIoT Security Essentials

Domain 4Objective 3

Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) ISE Practice Questions (Page 9)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

12concepts

Questions 41–45

41foundation · easy
Which authentication server is typically used in WPA-Enterprise (802.1X) mode?
Select an answer first
42expert · hard
A security auditor is evaluating a WEP network that uses Shared Key authentication. The auditor explains that this authentication method is actually weaker than Open System authentication. Why is Shared Key authentication considered weaker?
Select an answer first
43foundation · easy
In WPA-Personal (PSK) mode, how is the encryption key derived?
Select an answer first
44expert · hard
A penetration tester is assessing a legacy WEP network. The tester has captured a large number of packets but is struggling to recover the key because the network is not very active. The tester wants to accelerate the attack. Which technique would be most effective?
Select an answer first
45foundation · easy
What does the Message Integrity Check (MIC) in TKIP provide that WEP's CRC-32 did not?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.