Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A university wants to deploy enterprise Wi-Fi for students and staff. They require mutual authentication and want to avoid deploying client certificates to every device. They also want to protect user credentials during transmission. Which EAP method best fits these requirements?

   • ALEAP, which uses a shared secret and does not require certificates.
   • BEAP-MD5, which sends the password hash in clear text.
   • CPEAP-MSCHAPv2, which uses a server certificate and tunnels the client password exchange.
   • DEAP-TLS, which requires a client certificate on every device.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which encryption standard is used by WPA2 to provide strong security?

   • ARC4
   • B3DES
   • CTKIP
   • DAES-CCMP
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   In shared key authentication, what does a client need to provide to authenticate to the access point?

   • AA pre-shared key (PSK)
   • BNothing at all
   • CA digital certificate
   • DA username and password
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   In WPA2 personal mode, what is used to authenticate clients?

   • AA username and password stored on a RADIUS server
   • BA digital certificate on each client
   • CAn open authentication with no credentials
   • DA pre-shared key (PSK) derived from a passphrase
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is a known weakness of shared key authentication in WEP?

   • AIt requires a RADIUS server for authentication
   • BIt is vulnerable to eavesdropping because the challenge and response are transmitted in plaintext
   • CIt uses a very long key that is hard to manage
   • DIt does not encrypt any data after authentication
   Reveal Solution Discussion Select an answer first