220-801 · Question #646
Which of the following encryption methods is considered easily broken and should be avoided when configuring wireless security?
The correct answer is A. WEP. WEP (Wired Equivalent Privacy) is a deprecated wireless encryption standard with fundamental cryptographic flaws that allow it to be cracked in minutes using freely available tools. It should never be used for wireless security.
Question
Which of the following encryption methods is considered easily broken and should be avoided when configuring wireless security?
Options
- AWEP
- BWPA
- CAES
- DTKIP
How the community answered
(39 responses)- A95% (37)
- B3% (1)
- C3% (1)
Why each option
WEP (Wired Equivalent Privacy) is a deprecated wireless encryption standard with fundamental cryptographic flaws that allow it to be cracked in minutes using freely available tools. It should never be used for wireless security.
WEP uses a static 24-bit initialization vector (IV) and RC4 stream cipher in a way that causes IV collisions, allowing an attacker to collect enough packets to statistically recover the shared key in well under an hour. The IEEE deprecated WEP in 2004 and security standards such as NIST SP 800-153 explicitly prohibit its use in favor of WPA2 or WPA3.
WPA introduced TKIP and per-packet key mixing to address WEP's weaknesses and is significantly more resistant to the attacks that break WEP, though it is also now deprecated in favor of WPA2/WPA3.
AES (Advanced Encryption Standard) is a strong symmetric block cipher used by WPA2 and WPA3 and is considered cryptographically secure when properly implemented.
TKIP was designed as an interim improvement over WEP and, while deprecated, is far more resistant to the IV-collision attacks that make WEP trivially breakable.
Concept tested: WEP encryption weaknesses and wireless security best practices
Source: https://csrc.nist.gov/publications/detail/sp/800-153/final
Topics
Community Discussion
No community discussion yet for this question.