GPEN · Question #190
Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.
The correct answer is A. Using the longest key supported by hardware. B. Using a non-obvious key. D. Changing keys often. WEP is inherently weak due to its flawed IV implementation, but certain practices can slow down cracking attempts. SSID length has no bearing on WEP key security.
Question
Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.
Options
- AUsing the longest key supported by hardware.
- BUsing a non-obvious key.
- CUsing a 16 bit SSID.
- DChanging keys often.
How the community answered
(49 responses)- A80% (39)
- C20% (10)
Why each option
WEP is inherently weak due to its flawed IV implementation, but certain practices can slow down cracking attempts. SSID length has no bearing on WEP key security.
Using the longest key the hardware supports (e.g., 128-bit instead of 64-bit WEP) increases the keyspace an attacker must search, adding time and computational cost to the cracking process.
Non-obvious keys reduce the effectiveness of dictionary-based WEP cracking tools that attempt known or common key patterns before relying purely on IV collection.
The SSID is a network identifier and is not used in WEP key generation or encryption; its length has no effect on the difficulty of cracking the WEP key.
Frequently rotating the WEP key limits the window of time an attacker has to collect the minimum number of weak IVs (typically 40,000-85,000) needed to crack the key.
Concept tested: WEP security weaknesses and countermeasures
Source: https://csrc.nist.gov/publications/detail/sp/800-97/final
Topics
Community Discussion
No community discussion yet for this question.