What is the primary cryptographic weakness that allows WEP keys to be recovered through statistical analysis?

IV reuse and weak RC4 key scheduling

When analyzing a wireless capture, which field indicates that a network is using WEP encryption?

The data frames contain a 4-way handshake

The encryption bit in the beacon frame is set to WEP

The packets are encrypted with AES-CCMP

A security analyst is reviewing a wireless capture and notices that a client is using TKIP. The analyst wants to determine if the network is vulnerable to the Beck-Tews attack. Which condition is most important for this attack to succeed?

The attacker must force the client to use a null IV to enable key reuse.

The attacker must capture a valid four-way handshake and perform an offline dictionary attack.

The attacker must be able to inject packets into the network and predict the MIC key.

The attacker must have physical access to the AP to extract the pairwise master key.

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 1

Attacking Weak Encryption GAWN Practice Questions (Page 2)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 6–10

6application · medium
A security analyst is reviewing a Wireshark capture from a wireless network. The analyst sees that data frames are encrypted, but the IV is visible in the frame header. Which encryption protocol is most likely in use?
Select an answer first
7foundation · easy
What is the primary cryptographic weakness that allows WEP keys to be recovered through statistical analysis?
Select an answer first
8foundation · easy
Which command-line tool is used to capture raw 802.11 frames and save them to a file for later analysis?
Select an answer first
9foundation · easy
When analyzing a wireless capture, which field indicates that a network is using WEP encryption?
Select an answer first
10expert · hard
A security analyst is reviewing a wireless capture and notices that a client is using TKIP. The analyst wants to determine if the network is vulnerable to the Beck-Tews attack. Which condition is most important for this attack to succeed?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Attacking Weak Encryption GAWN Practice Questions (Page 2)

Questions 6–10

A security analyst is reviewing a Wireshark capture from a wireless network. The analyst sees that data frames are encrypted, but the IV is visible in the frame header. Which encryption protocol is most likely in use?

What is the primary cryptographic weakness that allows WEP keys to be recovered through statistical analysis?

Which command-line tool is used to capture raw 802.11 frames and save them to a file for later analysis?

When analyzing a wireless capture, which field indicates that a network is using WEP encryption?

A security analyst is reviewing a wireless capture and notices that a client is using TKIP. The analyst wants to determine if the network is vulnerable to the Beck-Tews attack. Which condition is most important for this attack to succeed?

Keep studying — Wireless Encryption and Authentication