Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security team is evaluating WPA3-Personal for a corporate network. They are concerned about compatibility with older Windows 7 laptops that only support WPA2. They want to enable WPA3 while ensuring these laptops can still connect. What is the best configuration?

   • AUse WPA2-Personal with a very long passphrase and disable WPA3.
   • BUse WPA3-Enterprise with EAP-TLS and issue certificates to all laptops.
   • CUse WPA3-Personal only and require all devices to upgrade.
   • DEnable WPA3-Personal with SAE and set the AP to allow WPA2-Personal as a fallback in mixed mode.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is upgrading from WPA/TKIP to WPA2-AES. After the change, some older laptops cannot connect. What is the most likely reason?

   • AThe WPA2 passphrase is too long.
   • BThe laptops are using WEP and need to be reconfigured.
   • CThe laptops do not support AES-CCMP hardware acceleration.
   • DThe access point is set to WPA2-Personal instead of WPA2-Enterprise.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A small clinic uses WPA2-Personal with a 10-character passphrase. An audit warns that the passphrase is weak and that legacy devices on the network do not support WPA3. The clinic wants to improve security without replacing the access points or the legacy devices. Which action best addresses the audit finding?

   • AChange the passphrase to a 20-character random string and keep WPA2-Personal.
   • BSwitch to WPA2-Enterprise with PEAP-MSCHAPv2 using the same passphrase as the user password.
   • CEnable WPA3-SAE transition mode on the access points.
   • DDisable encryption and rely on MAC address filtering to restrict access.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A legacy industrial sensor network still uses WEP with shared key authentication. A security consultant must convince the plant manager to upgrade. Which argument best explains the most critical weakness of WEP?

   • AWEP does not support any authentication, so anyone can join.
   • BWEP only supports 64-bit keys, making brute force easy.
   • CWEP uses RC4 with a short 24-bit IV, leading to key recovery after enough traffic is captured.
   • DWEP uses AES-CCMP, which is computationally too slow for older devices.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A hotel offers guest Wi-Fi. They want to prevent attackers from capturing the handshake and performing offline dictionary attacks against guest passwords. They also want to support older laptops that do not support WPA3. Which configuration best meets these needs?

   • AUse WPA3-SAE transition mode, which allows WPA2 clients to connect while WPA3-capable clients use SAE.
   • BUse WPA2-Enterprise with PEAP and a shared guest account.
   • CUse open authentication and a captive portal that asks for a room number.
   • DUse WPA2-Personal with a short, easy-to-remember passphrase for guests.
   Reveal Solution Discussion Select an answer first