Which of the following in a wireless capture indicates the use of weak encryption?

Presence of WEP IVs in data frames

What is the primary target of the Beck-Tews attack against WPA-TKIP?

The MIC key used for message integrity

The PSK used for authentication

A security auditor is assessing a small office that still uses WEP. The auditor wants to recover the WEP key to demonstrate the risk. The office has moderate wireless activity. Which approach will most efficiently obtain enough data to recover the key?

Deauthenticate a client and capture the four-way handshake, then run aircrack-ng with a dictionary.

Use a tool like coWPAtty to perform a dictionary attack against the captured WEP traffic.

Use aireplay-ng to inject ARP requests to generate fresh IVs, then run aircrack-ng on the capture.

Use airodump-ng to capture traffic and wait for enough unique IVs to accumulate naturally.

A penetration tester is attempting to crack a WPA2-PSK passphrase. The tester has captured a handshake, but the wordlist attack is slow. Which approach is most likely to improve the speed of the attack?

Switch to a WEP attack on the same network to recover the key faster.

Use a GPU-accelerated tool like Hashcat with a rule-based wordlist.

Capture more handshakes from different clients to increase the chance of success.

Use aircrack-ng with the same wordlist but run it multiple times.

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 1

Attacking Weak Encryption GAWN Practice Questions (Page 4)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 16–20

16foundation · easy
Which of the following in a wireless capture indicates the use of weak encryption?
Select an answer first
17foundation · easy
What is the primary target of the Beck-Tews attack against WPA-TKIP?
Select an answer first
18application · medium
A security auditor is assessing a small office that still uses WEP. The auditor wants to recover the WEP key to demonstrate the risk. The office has moderate wireless activity. Which approach will most efficiently obtain enough data to recover the key?
Select an answer first
19expert · hard
A penetration tester is attempting to crack a WPA2-PSK passphrase. The tester has captured a handshake, but the wordlist attack is slow. Which approach is most likely to improve the speed of the attack?
Select an answer first
20foundation · easy
Which protocol is vulnerable to the Beck-Tews attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.