N10-005 · Question #765
Which of the following is a common threat that collects Initialization Vectors to help speed up the algorithm for the attack?
The correct answer is A. WEP cracking. WEP is vulnerable to IV (Initialization Vector) collection attacks because its 24-bit IV space is small enough that IVs are frequently reused, allowing attackers to statistically crack the key.
Question
Which of the following is a common threat that collects Initialization Vectors to help speed up the algorithm for the attack?
Options
- AWEP cracking
- BWPA cracking
- CWar driving
- DRogue access point
How the community answered
(44 responses)- A89% (39)
- B7% (3)
- C2% (1)
- D2% (1)
Why each option
WEP is vulnerable to IV (Initialization Vector) collection attacks because its 24-bit IV space is small enough that IVs are frequently reused, allowing attackers to statistically crack the key.
WEP uses RC4 with a 24-bit Initialization Vector that is transmitted in plaintext. Because the IV space is small, IVs repeat frequently on busy networks. Tools like Aircrack-ng collect large numbers of IVs with weak key scheduling and use statistical analysis to recover the WEP key, sometimes in minutes. This fundamental flaw is what led to WEP being deprecated.
WPA uses TKIP which dynamically generates a new key per packet using a Temporal Key, eliminating the IV reuse vulnerability exploited against WEP.
War driving is the practice of scanning for wireless networks from a moving vehicle and does not specifically involve IV collection.
A rogue access point is an unauthorized AP placed on a network to intercept traffic; it does not involve IV collection attacks.
Concept tested: WEP IV collection vulnerability and RC4 key cracking
Source: https://www.wi-fi.org/discover-wi-fi/security
Topics
Community Discussion
No community discussion yet for this question.