nerdexam
GIAC

GSEC · Question #233

You are implementing wireless access at a defense contractor. Specifications say, you must implement the AES Encryption algorithm. Which encryption standard should you choose?

The correct answer is D. WPA 2. WPA2 is the Wi-Fi security standard that mandates AES encryption, making it the required choice for environments demanding AES compliance.

Network Security

Question

You are implementing wireless access at a defense contractor. Specifications say, you must implement the AES Encryption algorithm. Which encryption standard should you choose?

Options

  • AWPA
  • BTKIP
  • CWEP
  • DWPA 2

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    9% (2)
  • C
    5% (1)
  • D
    82% (18)

Why each option

WPA2 is the Wi-Fi security standard that mandates AES encryption, making it the required choice for environments demanding AES compliance.

AWPA

WPA uses TKIP (Temporal Key Integrity Protocol), which is based on RC4, not AES, and does not satisfy an AES requirement.

BTKIP

TKIP is an encryption protocol based on RC4 used in WPA, not an AES-based standard, and is considered cryptographically weak.

CWEP

WEP (Wired Equivalent Privacy) uses the RC4 stream cipher with a static key and is deprecated due to severe cryptographic vulnerabilities.

DWPA 2Correct

WPA2 (IEEE 802.11i) is the only standard listed that uses AES-CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) as its encryption algorithm. WPA2 replaced the weaker TKIP-based WPA and is required by government and defense environments that mandate AES. It provides 128-bit AES encryption, satisfying the specification described.

Concept tested: WPA2 AES-CCMP wireless encryption standard

Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/wifi/wpa2-enterprise-technology-overview

Topics

#WPA2#AES encryption#wireless security#encryption standards

Community Discussion

No community discussion yet for this question.

Full GSEC Practice