EC COUNCIL-Certified Ethical Hacker v8 Set 21

1.

WEP is used on 802.11 networks, what was it designed for?

WEP is designed to provide a wireless local area network (WLAN) with a level of security and privacy comparable to what it usually expected of a wired LAN. WEP is designed to provide strong encryption to a wireless local area network (WLAN) with a lever of integrity and privacy adequate for sensible but unclassifiedinformation. WEP is designed to provide a wireless local area network (WLAN) with a level of availability and privacy comparable to what is usually expected of a wired LAN. WEOP is designed to provide a wireless local area network (WLAN) with a level of privacy comparable to what it usually expected of a wired LAN.

2.

RC4 is known to be a good stream generator. RC4 is used within the WEP standard on wireless LAN. WEP is known to be insecure even if we are using a stream cipher that is known to be secured. What is the most likely cause behind this?

There are some flaws in the implementation. There is no key management. The IV range is too small. All of the above. None of the above.

3.

In an attempt to secure his wireless network, Bob turns off broadcasting of the SSID. He concludes that since his access points require the client computer to have the proper SSID, it would prevent others from connecting to the wireless network. Unfortunately unauthorized users are still able to connect to the wireless network. Why do you think this is possible?

Bob forgot to turn off DHCP. All access points are shipped with a default SSID. The SSID is still sent inside both client and AP packets. Bob's solution only works in ad-hoc mode.

4.

Which of the following is NOT a reason 802.11 WEP encryption is vulnerable?

There is no mutual authentication between wireless clients and access points Automated tools like AirSnort are available to discover WEP keys The standard does not provide for centralized key management The 24 bit Initialization Vector (IV) field is too small

5.

Which of the following is true of the wireless Service Set ID (SSID)? (Select all that apply.)

Identifies the wireless network Acts as a password for network access Should be left at the factory default setting Not broadcasting the SSID defeats NetStumbler and other wireless discovery tools

6.

While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?

Attempt to crack the WEP key using Airsnort. Attempt to brute force the access point and update or delete the MAC ACL. Steel a client computer and use it to access the wireless network. Sniff traffic if the WLAN and spoof your MAC address to one that you captured.

7.

Access control is often implemented through the use of MAC address filtering on wireless Access Points. Why is this considered to be a very limited security measure?

Vendors MAC address assignment is published on the Internet. The MAC address is not a real random number. The MAC address is broadcasted and can be captured by a sniffer. The MAC address is used properly only on Macintosh computers.

8.

On wireless networks, SSID is used to identify the network. Why are SSID not considered to be a good security mechanism to protect a wireless networks?

The SSID is only 32 bits in length. The SSID is transmitted in clear text. The SSID is the same as the MAC address for all vendors. The SSID is to identify a station, not a network.

9.

Jackson discovers that the wireless AP transmits 128 bytes of plaintext, and the station responds by encrypting the plaintext. It then transmits the resulting ciphertext using the same key and cipher that are used by WEP to encrypt subsequent network traffic. What authentication mechanism is being followed here?

no authentication single key authentication shared key authentication open system authentication

10.

Matthew re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Matthew assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs. What is this attack most appropriately called?

Spoof attack Replay attack Injection attack Rebound attack

EC COUNCIL-Certified Ethical Hacker v8 Set 21

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

EC COUNCIL-Certified Ethical Hacker v8 Set 21

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner