A security consultant is performing a WEP audit on a network that uses 128-bit WEP keys. The consultant has collected 50,000 IVs but aircrack-ng has not recovered the key. Which factor is most likely to be the cause?

The IVs are all the same, indicating a hardware issue.

The network is using a 128-bit key, which requires more IVs than a 64-bit key.

The wireless card is not in monitor mode.

During a wireless assessment, a security analyst captures traffic and sees that a legacy device is associating with an AP using WEP. The analyst wants to demonstrate the risk to management. Which finding is most accurate to report?

WEP is vulnerable because it does not support authentication, allowing anyone to join the network.

WEP uses RC4 with a 24-bit IV, which leads to IV reuse and allows key recovery with enough captured packets.

WEP is vulnerable because it uses TKIP, which can be broken with the Beck-Tews attack.

WEP is vulnerable because it uses a 128-bit key, which is too short for modern security.

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 1

Attacking Weak Encryption GAWN Practice Questions (Page 1)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 1–5

1expert · hard
A security consultant is performing a WEP audit on a network that uses 128-bit WEP keys. The consultant has collected 50,000 IVs but aircrack-ng has not recovered the key. Which factor is most likely to be the cause?
Select an answer first
2application · easy
You are testing a WPA2-PSK network. You have captured a handshake and want to perform a dictionary attack. Which tool is specifically designed to crack WPA2-PSK handshakes using a wordlist?
Select an answer first
3application · easy
You are using the aircrack-ng suite to test a wireless network. You need to put your wireless interface into monitor mode. Which command is the standard way to do this?
Select an answer first
4foundation · easy
Which of the following is a recommended replacement for WEP to improve wireless security?
Select an answer first
5application · medium
During a wireless assessment, a security analyst captures traffic and sees that a legacy device is associating with an AP using WEP. The analyst wants to demonstrate the risk to management. Which finding is most accurate to report?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Attacking Weak Encryption GAWN Practice Questions (Page 1)

Questions 1–5

A security consultant is performing a WEP audit on a network that uses 128-bit WEP keys. The consultant has collected 50,000 IVs but aircrack-ng has not recovered the key. Which factor is most likely to be the cause?

You are testing a WPA2-PSK network. You have captured a handshake and want to perform a dictionary attack. Which tool is specifically designed to crack WPA2-PSK handshakes using a wordlist?

You are using the aircrack-ng suite to test a wireless network. You need to put your wireless interface into monitor mode. Which command is the standard way to do this?

Which of the following is a recommended replacement for WEP to improve wireless security?

During a wireless assessment, a security analyst captures traffic and sees that a legacy device is associating with an AP using WEP. The analyst wants to demonstrate the risk to management. Which finding is most accurate to report?

Keep studying — Wireless Encryption and Authentication