GIAC
GAWN · Question #64
A WPA2-Enterprise SSID uses PEAP with MSCHAPv2 and "Do not validate server certificate" is common on endpoints. What is the highest-impact risk?
The correct answer is C. Credential theft via evil twin + rogue RADIUS. You've hit your limit · resets 1pm (America/New_York)
Advanced Wi-Fi Attacks and Mobile Device Exploitation
Question
A WPA2-Enterprise SSID uses PEAP with MSCHAPv2 and "Do not validate server certificate" is common on endpoints. What is the highest-impact risk?
Options
- AKRACK against the AP
- BOffline cracking of AES keys
- CCredential theft via evil twin + rogue RADIUS
- DWPS PIN brute force
How the community answered
(36 responses)- A6% (2)
- B8% (3)
- C67% (24)
- D19% (7)
Explanation
You've hit your limit · resets 1pm (America/New_York)
Topics
#PEAP-MSCHAPv2#evil twin#rogue RADIUS#certificate validation
Community Discussion
No community discussion yet for this question.