312-50V12 · Question #181
You are an ethical hacker contracted to conduct a security audit for a company. During the audit, you discover that the company's wireless network is using WEP encryption. You understand the vulnerabi
The correct answer is B. WPA2-PSK with AES encryption. WEP encryption is highly vulnerable, and to enhance wireless network security, WPA2-PSK with AES encryption is recommended as a robust and secure replacement.
Question
Options
- AOpen System authentication
- BWPA2-PSK with AES encryption
- CSSID broadcast disabling
- DMAC address filtering
How the community answered
(15 responses)- B87% (13)
- C7% (1)
- D7% (1)
Why each option
WEP encryption is highly vulnerable, and to enhance wireless network security, WPA2-PSK with AES encryption is recommended as a robust and secure replacement.
Open System authentication offers no encryption and allows any device to connect to the network without a shared key, making it far less secure than even WEP.
WPA2-PSK with AES encryption is the current industry standard for securing wireless networks against modern attacks, offering robust data encryption and authentication. WPA2 utilizes the Advanced Encryption Standard (AES) with Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP), which provides strong confidentiality and integrity, making it significantly more secure than the compromised WEP protocol.
SSID broadcast disabling is a minor obscurity measure that does not provide any encryption or prevent an attacker from discovering the SSID through passive listening.
MAC address filtering is an easily circumvented security mechanism as MAC addresses can be spoofed, and it does not provide any encryption for wireless traffic.
Concept tested: Wireless network security protocols and encryption standards
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-wireless
Topics
Community Discussion
No community discussion yet for this question.