nerdexam
GIAC

GPEN · Question #117

Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.

The correct answer is B. Changing keys often. C. Using the longest key supported by hardware. D. Using a non-obvious key.. WEP cracking is mitigated by using longer keys, rotating keys frequently, and choosing non-obvious keys. SSID length is unrelated to WEP key security.

Penetration Testing Foundations & Reconnaissance

Question

Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.

Options

  • AUsing a 16 bit SSID.
  • BChanging keys often.
  • CUsing the longest key supported by hardware.
  • DUsing a non-obvious key.

How the community answered

(31 responses)
  • A
    29% (9)
  • B
    71% (22)

Why each option

WEP cracking is mitigated by using longer keys, rotating keys frequently, and choosing non-obvious keys. SSID length is unrelated to WEP key security.

AUsing a 16 bit SSID.

The SSID is a network name identifier and has no relationship to WEP encryption key strength or resistance to IV-based cracking attacks.

BChanging keys often.Correct

Changing WEP keys often limits the number of IV (Initialization Vector) packets an attacker can collect before the key changes, making statistical cracking attacks like FMS harder to complete.

CUsing the longest key supported by hardware.Correct

Using the longest supported key (e.g., 128-bit vs. 40-bit) significantly increases the keyspace, requiring an attacker to capture far more IV packets to crack the key.

DUsing a non-obvious key.Correct

Non-obvious keys reduce susceptibility to dictionary-based attacks and guessing, adding a layer of complexity beyond purely statistical cracking.

Concept tested: WEP encryption weaknesses and countermeasures

Source: https://www.wi-fi.org/knowledge-center/faq/what-are-wpa-wpa2-and-wep

Topics

#WEP cracking#wireless security#encryption keys#SSID

Community Discussion

No community discussion yet for this question.

Full GPEN Practice