Which aspect of WEP's design directly leads to IV reuse and enables key recovery attacks?

The IV is generated using a weak random number generator

The IV is derived from the MAC address

The IV is encrypted with the same key as the data

Which technique is used to recover a WEP key from captured packets?

Statistical analysis of IVs and RC4 keystream

Recovering the MIC key from the handshake

Brute-force of the 128-bit AES key

You are using aircrack-ng suite to test the security of a wireless network. You have captured packets and need to determine which tool to use to force a connected client to disconnect so you can capture a WPA handshake. Which tool is designed for this purpose?

airmon-ng with the start option

airodump-ng with the --bssid option

aireplay-ng with the --deauth option

What is the primary security impact of using WEP in a wireless network?

The network is vulnerable to rogue access points only

The network is vulnerable to denial-of-service attacks only

An attacker can recover the encryption key and decrypt all traffic

The network cannot support modern devices

You are performing a WEP key recovery attack. You have collected a large number of IVs, but aircrack-ng is not finding the key. Which action is most likely to improve your chances of success?

Switch to a WPA2-PSK dictionary attack on the captured WEP packets.

Deauthenticate all clients and wait for them to reconnect to capture a handshake.

Capture more packets to increase the number of unique IVs, and try different attack modes in aircrack-ng.

Use a different wireless adapter that does not support injection.

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 1

Attacking Weak Encryption GAWN Practice Questions (Page 7)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 31–35

31foundation · easy
Which aspect of WEP's design directly leads to IV reuse and enables key recovery attacks?
Select an answer first
32foundation · easy
Which technique is used to recover a WEP key from captured packets?
Select an answer first
33application · easy
You are using aircrack-ng suite to test the security of a wireless network. You have captured packets and need to determine which tool to use to force a connected client to disconnect so you can capture a WPA handshake. Which tool is designed for this purpose?
Select an answer first
34foundation · easy
What is the primary security impact of using WEP in a wireless network?
Select an answer first
35application · medium
You are performing a WEP key recovery attack. You have collected a large number of IVs, but aircrack-ng is not finding the key. Which action is most likely to improve your chances of success?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.