nerdexam
EC-Council

312-50V12 · Question #136

An attacker identified that a user and an access point are both compatible with WPA2 and WPA3 encryption. The attacker installed a rogue access point with only WPA2 compatibility in the vicinity and…

The correct answer is C. Downgrade security attack. Downgrade Security Attacks - The client and AP compatiable with both WPA3 and WPA2 encryption mechanisms. Then the attacker installs a rogue AP with only WPA2 compatibility in the vicinity and forces the client to go through the four-way handshake (WPA2) to get connected. Once…

Submitted by kev92· Mar 4, 2026Wireless Network, Mobile, IoT, and OT Hacking

Question

An attacker identified that a user and an access point are both compatible with WPA2 and WPA3 encryption. The attacker installed a rogue access point with only WPA2 compatibility in the vicinity and forced the victim to go through the WPA2 four-way handshake to get connected. After the connection was established, the attacker used automated tools to crack WPA2-encrypted messages. What is the attack performed in the above scenario?

Options

  • ATiming-based attack
  • BSide-channel attack
  • CDowngrade security attack
  • DCache-based attack

How the community answered

(52 responses)
  • A
    8% (4)
  • B
    12% (6)
  • C
    77% (40)
  • D
    4% (2)

Explanation

Downgrade Security Attacks - The client and AP compatiable with both WPA3 and WPA2 encryption mechanisms. Then the attacker installs a rogue AP with only WPA2 compatibility in the vicinity and forces the client to go through the four-way handshake (WPA2) to get connected. Once the connection is established, the attacker uses all the attack tools available to exploit or crack the WPA2 encryption.

Topics

#downgrade attack#WPA2 cracking#wireless security#rogue access point

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice