GIAC
GCFA · Question #12
GCFA Question #12: Real Exam Question with Answer & Explanation
The correct answer is D. CCMP. CCMP is the only listed protocol that uses AES as its underlying cipher, making it the encryption method used in WPA2 and IEEE 802.11i.
Question
Which of the following encryption methods uses AES technology?
Options
- ADynamic WEP
- BStatic WEP
- CTKIP
- DCCMP
Explanation
CCMP is the only listed protocol that uses AES as its underlying cipher, making it the encryption method used in WPA2 and IEEE 802.11i.
Common mistakes.
- A. Dynamic WEP uses the RC4 stream cipher with dynamically rotating session keys rather than AES, and retains the fundamental cryptographic weaknesses of WEP despite the dynamic keying mechanism.
- B. Static WEP uses the RC4 stream cipher with fixed, manually configured keys and provides no AES-based encryption, making it highly vulnerable to attacks such as IV reuse and key recovery.
- C. TKIP was introduced as a temporary WPA upgrade over WEP but still relies on the RC4 stream cipher with per-packet key mixing rather than AES, and is now deprecated due to cryptographic weaknesses.
Concept tested. CCMP and AES encryption in IEEE 802.11i/WPA2
Reference. https://csrc.nist.gov/publications/detail/sp/800-97/final
Community Discussion
No community discussion yet for this question.