WPA Variants GAWN Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security architect is designing a wireless network for a financial institution that requires the highest security and must support a mix of devices, some of which are older and do not support WPA3. The architect also wants to ensure that the network is resistant to offline dictionary attacks. What is the best approach?

   • ADeploy WPA2-Enterprise with AES-CCMP and use a strong passphrase.
   • BDeploy WPA3-Personal with SAE and use a long passphrase.
   • CDeploy WPA3-Enterprise in transition mode, allowing WPA2 devices to connect with AES-CCMP and WPA3 devices to use SAE and GCMP-256.
   • DDeploy WPA3-Enterprise with GCMP-256 and require all devices to support WPA3.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security analyst is investigating a potential attack on a legacy WPA network. The analyst suspects that an attacker is attempting to recover the TKIP MIC key. Which attack technique is associated with this threat?

   • ADictionary attack
   • BChopChop attack
   • CKRACK attack
   • DEvil twin attack
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is deploying WPA3 transition mode. The security team is concerned that an attacker could trick a WPA3-capable client into downgrading to WPA2. What is the primary defense against this downgrade attack?

   • AEnable Protected Management Frames (PMF) on the network.
   • BConfigure the access point to disable WPA2 and use WPA3-only.
   • CUse WPA3-Enterprise instead of WPA3-Personal.
   • DUse a strong passphrase and monitor for rogue access points.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security auditor is evaluating a WPA2 network and wants to verify that replay protection is enabled. Which feature of AES-CCMP provides replay protection?

   • AA Message Integrity Code (MIC) that is computed over the entire frame.
   • BA 48-bit packet number (PN) that is incremented for each frame and checked by the receiver.
   • CA timestamp field added to each frame.
   • DA 24-bit initialization vector (IV) that is randomly generated for each frame.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which authentication method is a key feature of WPA3-Personal?

   • APre-shared key (PSK) with 4-way handshake
   • BWEP shared key authentication
   • C802.1X with EAP-TLS
   • DSimultaneous Authentication of Equals (SAE)
   Reveal Solution Discussion Select an answer first