Attacking Weak Encryption GAWN Practice Questions (Page 10)

Questions 46–47

1. 46application · medium

   A security analyst is explaining to a client why WEP is insecure. Which statement accurately describes a core cryptographic weakness of WEP?

   • AWEP uses a 64-bit key, which is too short to prevent brute-force attacks.
   • BThe 24-bit IV is transmitted in plaintext and reused frequently, allowing statistical attacks on the RC4 keystream.
   • CWEP does not use a per-packet key, so all packets are encrypted with the same key.
   • DWEP uses a weak checksum (CRC-32) that allows attackers to modify packets without detection.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A security analyst is reviewing a network that uses WPA-TKIP. The analyst wants to explain the risk of the Beck-Tews attack to management. Which impact is most accurate?

   • AAn attacker can inject up to a few small packets, such as ARP requests, without being detected.
   • BAn attacker can recover the pre-shared key and decrypt all traffic.
   • CAn attacker can force all clients to disconnect from the network.
   • DAn attacker can decrypt all traffic without injecting any packets.
   Reveal Solution Discussion Select an answer first