A client has a legacy device that only supports WEP, but they are concerned about security. They ask you to recommend a solution that balances security with the need to keep the device operational. Which recommendation is the most secure among the listed options?

Use WEP with a longer key (e.g., 128-bit) and change it frequently.

Replace the legacy device with one that supports WPA2-AES, and migrate the network to WPA2-AES.

Deploy a separate WEP network for the legacy device and isolate it from the main network.

Keep WEP enabled but hide the SSID and enable MAC address filtering.

You are reviewing a packet capture from a wireless network. You see that the data frames are encrypted, but you notice that the IVs are repeating every few thousand frames. Which encryption protocol is most likely in use, and what is the primary risk?

WPA-TKIP, because it uses a 24-bit IV that repeats, allowing MIC key recovery.

WEP, because it uses a 24-bit IV that repeats, allowing statistical attacks to recover the key.

WPA2-AES, because it uses a 48-bit IV that repeats, allowing key recovery.

WPA2-PSK, because it uses a 64-bit IV that repeats, allowing dictionary attacks.

A company has a legacy wireless network that supports only WEP and TKIP. Management wants to improve security but cannot replace older devices that do not support WPA2. Which recommendation best balances security and compatibility?

Disable encryption entirely and rely on MAC filtering to control access.

Use WPA with TKIP as a transitional measure, but plan to migrate to WPA2/3 as soon as devices are replaced.

Use a VPN on top of WEP to secure all traffic.

Keep WEP but increase the key length to 256 bits to make it harder to crack.

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 1

Attacking Weak Encryption GAWN Practice Questions (Page 3)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 11–15

11expert · hard
A client has a legacy device that only supports WEP, but they are concerned about security. They ask you to recommend a solution that balances security with the need to keep the device operational. Which recommendation is the most secure among the listed options?
Select an answer first
12application · medium
You are reviewing a packet capture from a wireless network. You see that the data frames are encrypted, but you notice that the IVs are repeating every few thousand frames. Which encryption protocol is most likely in use, and what is the primary risk?
Select an answer first
13application · easy
A company is planning to upgrade their wireless network. They currently use WEP and want to improve security. Which encryption protocol should they adopt to provide the strongest security among the listed options?
Select an answer first
14expert · hard
A company has a legacy wireless network that supports only WEP and TKIP. Management wants to improve security but cannot replace older devices that do not support WPA2. Which recommendation best balances security and compatibility?
Select an answer first
15foundation · easy
Which tool is commonly used to capture packets and crack WEP keys?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Attacking Weak Encryption GAWN Practice Questions (Page 3)

Questions 11–15

A client has a legacy device that only supports WEP, but they are concerned about security. They ask you to recommend a solution that balances security with the need to keep the device operational. Which recommendation is the most secure among the listed options?

You are reviewing a packet capture from a wireless network. You see that the data frames are encrypted, but you notice that the IVs are repeating every few thousand frames. Which encryption protocol is most likely in use, and what is the primary risk?

A company is planning to upgrade their wireless network. They currently use WEP and want to improve security. Which encryption protocol should they adopt to provide the strongest security among the listed options?

A company has a legacy wireless network that supports only WEP and TKIP. Management wants to improve security but cannot replace older devices that do not support WPA2. Which recommendation best balances security and compatibility?

Which tool is commonly used to capture packets and crack WEP keys?

Keep studying — Wireless Encryption and Authentication