A small law firm uses WPA2-Personal with a 10-character passphrase for its office Wi-Fi. An auditor warns that the network is at risk from offline dictionary attacks. The firm wants to keep using a single shared passphrase for guests and staff. Which change most directly reduces the offline dictionary attack risk?

Disable SSID broadcast and enable MAC filtering while keeping WPA2-Personal.

Switch to WPA3-Personal with SAE and a longer, random passphrase.

Keep WPA2-Personal but change the passphrase to a 12-character word found in a dictionary.

Enable WPA2-Enterprise with PEAP-MSCHAPv2 and the same shared passphrase.

A company is deploying WPA3-Personal. They have a mix of devices: some support WPA3, some only support WPA2. They want to maximize security while ensuring all devices can connect. Which configuration is best?

Use WPA2-Enterprise with PEAP, because it supports both old and new devices.

Enable WPA3-SAE transition mode, which allows WPA2 clients to connect using WPA2-Personal and WPA3 clients to use SAE.

Use WPA3-Personal only, and require all devices to be upgraded.

Use WPA2-Personal only, because it is compatible with all devices.

What is a key advantage of enterprise wireless authentication over personal mode?

It allows for individual user credentials and centralized management

It uses a single shared passphrase for all users

It is easier to set up than personal mode

It does not require any authentication

A coffee shop wants to offer free Wi-Fi to customers but also wants to prevent casual eavesdropping on their web browsing. They plan to use open authentication with no password. What additional measure should they implement to protect customer data?

Use a captive portal that requires acceptance of terms but no encryption

Enable WPA2 encryption with a shared passphrase displayed in the shop

Enable MAC filtering to allow only registered devices

Encourage customers to use HTTPS and a VPN for sensitive activities

EC-CouncilNetwork Defense Essentials

Domain 5Objective 2

Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 2)

Part of the Wireless, Mobile, and IoT Security domain, which makes up ~17% of our current practice bank.

52questions here

11free pages

10concepts

Questions 6–10

6application · medium
A small law firm uses WPA2-Personal with a 10-character passphrase for its office Wi-Fi. An auditor warns that the network is at risk from offline dictionary attacks. The firm wants to keep using a single shared passphrase for guests and staff. Which change most directly reduces the offline dictionary attack risk?
Select an answer first
7expert · hard
A company is deploying WPA3-Personal. They have a mix of devices: some support WPA3, some only support WPA2. They want to maximize security while ensuring all devices can connect. Which configuration is best?
Select an answer first
8foundation · easy
What is a key advantage of enterprise wireless authentication over personal mode?
Select an answer first
9application · medium
A coffee shop wants to offer free Wi-Fi to customers but also wants to prevent casual eavesdropping on their web browsing. They plan to use open authentication with no password. What additional measure should they implement to protect customer data?
Select an answer first
10expert · hard
A hospital is deploying enterprise Wi-Fi for medical devices that support 802.1X but do not support certificate-based EAP methods. The security team requires mutual authentication and protection of credentials. Which EAP method is the best choice?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 2)

Questions 6–10

A company is deploying WPA3-Personal. They have a mix of devices: some support WPA3, some only support WPA2. They want to maximize security while ensuring all devices can connect. Which configuration is best?

What is a key advantage of enterprise wireless authentication over personal mode?

A coffee shop wants to offer free Wi-Fi to customers but also wants to prevent casual eavesdropping on their web browsing. They plan to use open authentication with no password. What additional measure should they implement to protect customer data?

A hospital is deploying enterprise Wi-Fi for medical devices that support 802.1X but do not support certificate-based EAP methods. The security team requires mutual authentication and protection of credentials. Which EAP method is the best choice?

Keep studying — Wireless, Mobile, and IoT Security