A company operates a warehouse with a mix of modern and legacy IoT devices. The legacy devices only support WPA2-Personal with TKIP. The company wants to maintain strong security for the main office network while isolating the legacy devices. Which approach best balances security and compatibility?

Use WPA2-Personal with AES-CCMP on the main network and force legacy devices to connect to it.

Disable encryption on the legacy network to ensure compatibility.

Upgrade all legacy devices to support WPA3-SAE.

Create a separate SSID for legacy devices using WPA2-Personal with TKIP, and place it on a segmented VLAN with no internet access.

What is the purpose of the four-way handshake in WPA/WPA2 personal mode?

To authenticate the client using a digital certificate

To assign an IP address to the client

To exchange encryption keys and confirm that both parties have the correct PSK

To encrypt the data frames using AES

A company has an older access point that supports only WPA with TKIP. They cannot upgrade the hardware immediately. What is the most important security limitation they should be aware of?

TKIP uses RC4 and has known vulnerabilities, including the possibility of packet injection and decryption.

TKIP uses AES-CCMP, which is vulnerable to brute-force attacks.

TKIP uses a static key that never changes.

TKIP does not encrypt data, only provides authentication.

A network admin is troubleshooting a wireless issue. The AP is configured for WPA2-AES, but a user's laptop connects successfully but then loses connectivity intermittently. The laptop supports WPA2 but the driver is outdated. What is the most likely cause?

The laptop is using TKIP instead of AES.

The AP is set to WPA2-Personal instead of WPA2-Enterprise.

The laptop's wireless driver has a bug with AES-CCMP, causing intermittent disconnects.

The WPA2 passphrase is incorrect.

EC-CouncilNetwork Defense Essentials

Domain 5Objective 2

Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 10)

Part of the Wireless, Mobile, and IoT Security domain, which makes up ~17% of our current practice bank.

52questions here

11free pages

10concepts

Questions 46–50

46expert · hard
A company operates a warehouse with a mix of modern and legacy IoT devices. The legacy devices only support WPA2-Personal with TKIP. The company wants to maintain strong security for the main office network while isolating the legacy devices. Which approach best balances security and compatibility?
Select an answer first
47foundation · easy
What is the purpose of the four-way handshake in WPA/WPA2 personal mode?
Select an answer first
48foundation · easy
Which EAP method requires both the client and the server to have digital certificates?
Select an answer first
49application · medium
A company has an older access point that supports only WPA with TKIP. They cannot upgrade the hardware immediately. What is the most important security limitation they should be aware of?
Select an answer first
50expert · hard
A network admin is troubleshooting a wireless issue. The AP is configured for WPA2-AES, but a user's laptop connects successfully but then loses connectivity intermittently. The laptop supports WPA2 but the driver is outdated. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.