A network administrator is troubleshooting a legacy device that can only connect using WPA with TKIP. The administrator is concerned about the security of TKIP. Which of the following is a known weakness of TKIP that the administrator should be aware of?

TKIP uses a static key that never changes.

TKIP is vulnerable to the Beck-Tews attack, which can inject a limited number of packets.

TKIP uses a 64-bit key, which is too short.

TKIP does not provide any integrity checking.

A company is still using WPA with TKIP on its wireless network. The IT manager wants to understand why WPA was introduced in the first place. What was the primary reason for the development of WPA?

To replace WEP with a more secure encryption protocol.

To increase the speed of wireless connections.

To allow more devices to connect to a network.

To simplify the configuration of wireless networks.

A company wants to deploy WPA2-Enterprise for its corporate network. The security policy requires that each user has a unique set of credentials and that the authentication server can revoke access for a single user without affecting others. Which authentication method should be used?

EAP-TLS with client certificates

EAP-PEAP with a shared password

WPA2-Personal with a shared passphrase

What is a cryptographic improvement in WPA3 over WPA2?

Use of 256-bit encryption keys and stronger key derivation

Use of 64-bit keys for faster encryption

Use of TKIP for backward compatibility

How does AES-CCMP provide both confidentiality and integrity for data frames in WPA2?

It uses TKIP for encryption and Michael for integrity

It uses AES-CCM for both encryption and integrity

It uses AES-CTR for encryption and AES-CBC-MAC for integrity

It uses RC4 for encryption and a CRC-32 checksum for integrity

GIAC Assessing and Auditing Wireless Networks

Domain 2Objective 2

WPA Variants GAWN Practice Questions (Page 5)

Part of the Wireless Encryption and Authentication domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

11concepts

Questions 21–25

21application · medium
A network administrator is troubleshooting a legacy device that can only connect using WPA with TKIP. The administrator is concerned about the security of TKIP. Which of the following is a known weakness of TKIP that the administrator should be aware of?
Select an answer first
22application · medium
A company is still using WPA with TKIP on its wireless network. The IT manager wants to understand why WPA was introduced in the first place. What was the primary reason for the development of WPA?
Select an answer first
23application · medium
A company wants to deploy WPA2-Enterprise for its corporate network. The security policy requires that each user has a unique set of credentials and that the authentication server can revoke access for a single user without affecting others. Which authentication method should be used?
Select an answer first
24foundation · easy
What is a cryptographic improvement in WPA3 over WPA2?
Select an answer first
25foundation · easy
How does AES-CCMP provide both confidentiality and integrity for data frames in WPA2?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.