nerdexam
EC-Council

312-50V12 · Question #181

You are an ethical hacker contracted to conduct a security audit for a company. During the audit, you discover that the company's wireless network is using WEP encryption. You understand the vulnerabi

The correct answer is B. WPA2-PSK with AES encryption. WEP encryption is highly vulnerable, and to enhance wireless network security, WPA2-PSK with AES encryption is recommended as a robust and secure replacement.

Submitted by packet_pusher· Mar 4, 2026Wireless Network, Mobile, IoT, and OT Hacking

Question

You are an ethical hacker contracted to conduct a security audit for a company. During the audit, you discover that the company's wireless network is using WEP encryption. You understand the vulnerabilities associated with WEP and plan to recommend a more secure encryption method. Which of the following would you recommend as a suitable replacement to enhance the security of the company's wireless network?

Options

  • AOpen System authentication
  • BWPA2-PSK with AES encryption
  • CSSID broadcast disabling
  • DMAC address filtering

How the community answered

(15 responses)
  • B
    87% (13)
  • C
    7% (1)
  • D
    7% (1)

Why each option

WEP encryption is highly vulnerable, and to enhance wireless network security, WPA2-PSK with AES encryption is recommended as a robust and secure replacement.

AOpen System authentication

Open System authentication offers no encryption and allows any device to connect to the network without a shared key, making it far less secure than even WEP.

BWPA2-PSK with AES encryptionCorrect

WPA2-PSK with AES encryption is the current industry standard for securing wireless networks against modern attacks, offering robust data encryption and authentication. WPA2 utilizes the Advanced Encryption Standard (AES) with Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP), which provides strong confidentiality and integrity, making it significantly more secure than the compromised WEP protocol.

CSSID broadcast disabling

SSID broadcast disabling is a minor obscurity measure that does not provide any encryption or prevent an attacker from discovering the SSID through passive listening.

DMAC address filtering

MAC address filtering is an easily circumvented security mechanism as MAC addresses can be spoofed, and it does not provide any encryption for wireless traffic.

Concept tested: Wireless network security protocols and encryption standards

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-wireless

Topics

#WEP vulnerability#WPA2#wireless security#AES encryption

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice