A company is choosing between WPA2-Personal and WPA2-Enterprise. They have a small office with 10 employees and no IT staff. Which factor most strongly favors WPA2-Personal?

WPA2-Personal is immune to offline dictionary attacks.

WPA2-Personal does not require a RADIUS server or certificate infrastructure.

WPA2-Personal allows individual user accounts and centralized management.

WPA2-Personal provides stronger encryption than WPA2-Enterprise.

A company is using WPA2-Personal with a 12-character passphrase. An attacker has captured the four-way handshake and is attempting an offline dictionary attack. Which mitigation is most effective?

Use WPA2-Enterprise with PEAP-MSCHAPv2.

Disable the SSID broadcast to hide the network.

Enable MAC filtering to block the attacker's device.

Change the passphrase to a 20-character random string.

A company is deploying 802.1X with EAP-TLS. They have installed a RADIUS server and issued certificates to all client devices. However, users report that they cannot connect. The RADIUS logs show that the authentication request reaches the server but is rejected. What is the most likely cause?

The RADIUS server is using the wrong shared secret for the access point.

The client certificate is not trusted by the RADIUS server because the root CA is not in its trust store.

The access point is not broadcasting the SSID.

The client is using WPA2-Personal instead of WPA2-Enterprise.

EC-CouncilNetwork Defense Essentials

Domain 5Objective 2

Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 3)

Part of the Wireless, Mobile, and IoT Security domain, which makes up ~17% of our current practice bank.

52questions here

11free pages

10concepts

Questions 11–15

11application · medium
A company is choosing between WPA2-Personal and WPA2-Enterprise. They have a small office with 10 employees and no IT staff. Which factor most strongly favors WPA2-Personal?
Select an answer first
12application · medium
A hospital wants to deploy enterprise Wi-Fi for staff laptops that are joined to the corporate domain. They need certificate-based authentication and support for fast roaming between access points. Which 802.1X EAP method should they choose?
Select an answer first
13expert · hard
A company is using WPA2-Personal with a 12-character passphrase. An attacker has captured the four-way handshake and is attempting an offline dictionary attack. Which mitigation is most effective?
Select an answer first
14application · medium
A company is deploying 802.1X with EAP-TLS. They have installed a RADIUS server and issued certificates to all client devices. However, users report that they cannot connect. The RADIUS logs show that the authentication request reaches the server but is rejected. What is the most likely cause?
Select an answer first
15foundation · easy
Which encryption algorithm is used by WEP to protect wireless data frames?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 3)

Questions 11–15

A company is choosing between WPA2-Personal and WPA2-Enterprise. They have a small office with 10 employees and no IT staff. Which factor most strongly favors WPA2-Personal?

A hospital wants to deploy enterprise Wi-Fi for staff laptops that are joined to the corporate domain. They need certificate-based authentication and support for fast roaming between access points. Which 802.1X EAP method should they choose?

A company is using WPA2-Personal with a 12-character passphrase. An attacker has captured the four-way handshake and is attempting an offline dictionary attack. Which mitigation is most effective?

A company is deploying 802.1X with EAP-TLS. They have installed a RADIUS server and issued certificates to all client devices. However, users report that they cannot connect. The RADIUS logs show that the authentication request reaches the server but is rejected. What is the most likely cause?

Which encryption algorithm is used by WEP to protect wireless data frames?

Keep studying — Wireless, Mobile, and IoT Security