N10-005 Question #765: Real Exam Question with Answer & Explanation

The correct answer is A: WEP cracking. WEP is vulnerable to IV (Initialization Vector) collection attacks because its 24-bit IV space is small enough that IVs are frequently reused, allowing attackers to statistically crack the key.

Question

Which of the following is a common threat that collects Initialization Vectors to help speed up the algorithm for the attack?

Options

AWEP cracking
BWPA cracking
CWar driving
DRogue access point

Explanation

WEP is vulnerable to IV (Initialization Vector) collection attacks because its 24-bit IV space is small enough that IVs are frequently reused, allowing attackers to statistically crack the key.

Common mistakes.

B. WPA uses TKIP which dynamically generates a new key per packet using a Temporal Key, eliminating the IV reuse vulnerability exploited against WEP.
C. War driving is the practice of scanning for wireless networks from a moving vehicle and does not specifically involve IV collection.
D. A rogue access point is an unauthorized AP placed on a network to intercept traffic; it does not involve IV collection attacks.

Concept tested. WEP IV collection vulnerability and RC4 key cracking

Reference. https://www.wi-fi.org/discover-wi-fi/security

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice