A company is planning to upgrade its wireless security. Currently, it uses WEP for legacy devices and WPA-TKIP for others. Management wants to eliminate weak encryption but cannot afford to replace all legacy devices immediately. Which plan best addresses the risk while maintaining operations?

Immediately disable WEP and TKIP, forcing all devices to use WPA2-AES, and replace any devices that cannot comply.

Keep WEP but add a VPN for all traffic to protect data.

Keep WEP for legacy devices on a separate VLAN with no internet access, and migrate other devices to WPA2-AES.

Use WPA-TKIP for all devices, including legacy ones, as a compromise.

An auditor is performing a WEP key recovery attack. The auditor has captured 20,000 IVs but aircrack-ng has not recovered the key. Which action is most likely to increase the chance of success?

Capture more IVs by continuing to run the ARP replay attack.

Use a different wireless card to capture the same IVs.

Run aircrack-ng with the -n flag to specify a longer key length.

Switch to a dictionary attack against the captured IVs.

In a WEP key recovery attack, what is the purpose of ARP request replay?

To recover the PSK from the handshake

To generate new IVs and increase the number of captured packets

To force the client to disconnect

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 1

Attacking Weak Encryption GAWN Practice Questions (Page 9)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 41–45

41expert · hard
A company is planning to upgrade its wireless security. Currently, it uses WEP for legacy devices and WPA-TKIP for others. Management wants to eliminate weak encryption but cannot afford to replace all legacy devices immediately. Which plan best addresses the risk while maintaining operations?
Select an answer first
42application · medium
An auditor is performing a WEP key recovery attack. The auditor has captured 20,000 IVs but aircrack-ng has not recovered the key. Which action is most likely to increase the chance of success?
Select an answer first
43application · easy
You are auditing a wireless network and need to identify which encryption protocols are considered weak and should be avoided. Which combination of protocols is generally considered weak in modern wireless security?
Select an answer first
44application · easy
You are performing a WEP key recovery attack. You have successfully injected ARP requests and captured a large number of IVs. Which tool do you use to actually recover the WEP key from the captured packets?
Select an answer first
45foundation · easy
In a WEP key recovery attack, what is the purpose of ARP request replay?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Attacking Weak Encryption GAWN Practice Questions (Page 9)

Questions 41–45

A company is planning to upgrade its wireless security. Currently, it uses WEP for legacy devices and WPA-TKIP for others. Management wants to eliminate weak encryption but cannot afford to replace all legacy devices immediately. Which plan best addresses the risk while maintaining operations?

An auditor is performing a WEP key recovery attack. The auditor has captured 20,000 IVs but aircrack-ng has not recovered the key. Which action is most likely to increase the chance of success?

You are auditing a wireless network and need to identify which encryption protocols are considered weak and should be avoided. Which combination of protocols is generally considered weak in modern wireless security?

You are performing a WEP key recovery attack. You have successfully injected ARP requests and captured a large number of IVs. Which tool do you use to actually recover the WEP key from the captured packets?

In a WEP key recovery attack, what is the purpose of ARP request replay?

Keep studying — Wireless Encryption and Authentication