Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A small office is still using WEP because their access point is very old. The owner wants to improve security but cannot afford new hardware. What is the best advice?

   • AChange the WEP key to a 128-bit key and use a complex passphrase.
   • BUse open authentication with a captive portal.
   • CUpgrade the access point firmware to support WPA if available.
   • DDisable SSID broadcast and enable MAC filtering.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary role of AES-CCMP in WPA2?

   • AIt only encrypts the data, with no integrity checking
   • BIt manages the distribution of pre-shared keys
   • CIt provides both confidentiality and integrity for data frames
   • DIt only authenticates clients, not encrypts data
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A legacy wireless network uses shared key authentication with WEP. An attacker is able to authenticate to the network without knowing the shared key. What is the most likely reason?

   • AThe attacker used a dictionary attack against the WEP key.
   • BThe attacker spoofed the MAC address of an authorized client.
   • CThe attacker captured the plaintext challenge and the encrypted response, allowing them to derive the keystream and respond to future challenges.
   • DThe attacker used a rogue access point to trick the client.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A city library offers free Wi-Fi. They want to protect users from eavesdropping but do not want to require authentication. They are considering using WPA2-Personal with a publicly posted passphrase. What is the main security trade-off?

   • AWPA2-Personal is vulnerable to offline dictionary attacks, so the passphrase can be recovered.
   • BThe passphrase is public, so anyone can join, and the encryption key is known to all users, allowing them to decrypt other users' traffic if they capture it.
   • CWPA2-Personal requires a RADIUS server, which is too complex for a library.
   • DWPA2-Personal does not encrypt traffic, so users are exposed.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In the 802.1X authentication framework, what is the role of the 'supplicant'?

   • AThe server that verifies credentials
   • BThe device that controls access to the network
   • CThe protocol used to encrypt data
   • DThe device that requests access to the network
   Reveal Solution Discussion Select an answer first