nerdexam
CompTIA

220-801 · Question #646

Which of the following encryption methods is considered easily broken and should be avoided when configuring wireless security?

The correct answer is A. WEP. WEP (Wired Equivalent Privacy) is a deprecated wireless encryption standard with fundamental cryptographic flaws that allow it to be cracked in minutes using freely available tools. It should never be used for wireless security.

Networking

Question

Which of the following encryption methods is considered easily broken and should be avoided when configuring wireless security?

Options

  • AWEP
  • BWPA
  • CAES
  • DTKIP

How the community answered

(39 responses)
  • A
    95% (37)
  • B
    3% (1)
  • C
    3% (1)

Why each option

WEP (Wired Equivalent Privacy) is a deprecated wireless encryption standard with fundamental cryptographic flaws that allow it to be cracked in minutes using freely available tools. It should never be used for wireless security.

AWEPCorrect

WEP uses a static 24-bit initialization vector (IV) and RC4 stream cipher in a way that causes IV collisions, allowing an attacker to collect enough packets to statistically recover the shared key in well under an hour. The IEEE deprecated WEP in 2004 and security standards such as NIST SP 800-153 explicitly prohibit its use in favor of WPA2 or WPA3.

BWPA

WPA introduced TKIP and per-packet key mixing to address WEP's weaknesses and is significantly more resistant to the attacks that break WEP, though it is also now deprecated in favor of WPA2/WPA3.

CAES

AES (Advanced Encryption Standard) is a strong symmetric block cipher used by WPA2 and WPA3 and is considered cryptographically secure when properly implemented.

DTKIP

TKIP was designed as an interim improvement over WEP and, while deprecated, is far more resistant to the IV-collision attacks that make WEP trivially breakable.

Concept tested: WEP encryption weaknesses and wireless security best practices

Source: https://csrc.nist.gov/publications/detail/sp/800-153/final

Topics

#WEP#wireless security#encryption#wireless protocols

Community Discussion

No community discussion yet for this question.

Full 220-801 Practice