nerdexam
GIAC

GSEC · Question #178

Which of the following authentication methods are used by Wired Equivalent Privacy (WEP)? Each correct answer represents a complete solution. Choose two.

The correct answer is C. Open system authentication D. Shared key authentication. WEP supports two authentication methods - open system and shared key - neither of which provides strong security by modern standards.

Network Security

Question

Which of the following authentication methods are used by Wired Equivalent Privacy (WEP)? Each correct answer represents a complete solution. Choose two.

Options

  • AAnonymous authentication
  • BMutual authentication
  • COpen system authentication
  • DShared key authentication

How the community answered

(40 responses)
  • A
    15% (6)
  • B
    8% (3)
  • C
    78% (31)

Why each option

WEP supports two authentication methods - open system and shared key - neither of which provides strong security by modern standards.

AAnonymous authentication

Anonymous authentication is not a defined WEP authentication mode in the IEEE 802.11 standard.

BMutual authentication

Mutual authentication, where both client and server verify each other, is not supported by WEP and is a feature of stronger protocols like WPA2-Enterprise using EAP.

COpen system authenticationCorrect

Open system authentication in WEP requires no credentials; any client can associate with the access point, making it the least secure option but a valid WEP mode.

DShared key authenticationCorrect

Shared key authentication requires the client to prove knowledge of the WEP key via a challenge-response exchange, though this method is actually weaker than open system because it exposes the keystream to attackers.

Concept tested: WEP authentication modes in 802.11

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-xp/bb878021(v=technet.10)

Topics

#WEP#wireless authentication#open system authentication#shared key authentication

Community Discussion

No community discussion yet for this question.

Full GSEC Practice