Attacking Weak Encryption GAWN Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   You are performing a wireless audit and need to explain why WEP is considered broken. You have captured a large number of packets from a WEP network. Which cryptographic weakness is the primary reason that tools like aircrack-ng can recover the key?

   • AThe IV is encrypted with the same key as the data, allowing an attacker to decrypt the IV and recover the key.
   • BThe RC4 key scheduling algorithm produces weak keys when the IV is known, allowing statistical analysis of the keystream.
   • CThe MIC is transmitted in plaintext, allowing an attacker to modify packets without detection.
   • DThe access point uses a static key that is shared with all clients, allowing an attacker to read the key from the beacon.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   During an assessment, you capture traffic from a network using WPA-TKIP. You notice that the access point is sending QoS data frames. You need to determine if the network is vulnerable to the Beck-Tews attack. Which condition is most critical for this attack to succeed?

   • AThe network must be using WPA2-AES instead of WPA-TKIP.
   • BThe access point must have QoS disabled to allow packet injection.
   • CThe ability to capture a valid four-way handshake to perform an offline dictionary attack.
   • DThe ability to inject packets into the network and receive the resulting encrypted frames to recover the MIC key.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A network administrator is deciding whether to keep WPA-TKIP enabled for legacy devices. A security consultant warns that TKIP is vulnerable to the Beck-Tews attack. Which mitigation is most effective against this specific attack?

   • AEnable MAC filtering to prevent attackers from injecting packets.
   • BUse a longer pre-shared key to make the MIC key harder to guess.
   • CIncrease the TKIP key rotation interval to make it harder to recover the MIC key.
   • DDisable TKIP and require WPA2-AES on all devices.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   You are explaining to a client why WEP is insecure. Which statement accurately describes a fundamental flaw in WEP?

   • AWEP does not use any encryption, so all traffic is sent in plaintext.
   • BWEP uses a 24-bit IV that is transmitted in plaintext and reused, allowing an attacker to recover the key through statistical analysis.
   • CWEP uses a static key that is shared with all clients, but the key is never transmitted.
   • DWEP uses a 128-bit key that is too short to prevent brute-force attacks.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A penetration tester is assessing a WPA2-PSK network with a very strong passphrase. The tester has captured a handshake and has a large wordlist, but the attack is taking too long. Which approach is most likely to improve the chances of success?

   • ASwitch to a WEP attack on the same network to recover the key faster.
   • BUse aircrack-ng with the same wordlist but run it multiple times.
   • CUse a rule-based attack with Hashcat to generate variations of the wordlist entries.
   • DCapture more handshakes from different clients to increase the chance of success.
   Reveal Solution Discussion Select an answer first