CWNP Exam CWAP-404 Topic 6 Question 37 Discussion

Actual exam question for CWNP's CWAP-404 exam

Question #: 37
Topic #: 6

Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software. When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?

AAuthentication

B4-Way Handshake

CReassociation

DProbe Response

Show Suggested Answer

Suggested Answer: B

The 4-way handshake is the process that establishes the pairwise transient key (PTK) between the client and the AP in WPA2-PSK. The PTK is derived from the PSK, the SSID, and some random numbers exchanged in the handshake frames. The PTK is used to encrypt and decrypt the data frames between the client and the AP.Therefore, in order to decrypt WPA2-PSK data packets, a protocol analyzer needs to capture the 4-way handshake frames and have the PSK and SSID configured in the analyzer software12Reference:

CWAP-404 Study Guide, Chapter 3: 802.11 MAC Layer Frame Formats and Technologies, page 87

CWAP-404 Objectives, Section 3.5: Analyze security exchanges

by Catrice at Jul 10, 2025, 11:07 AM

Limited Time Offer

25%

Off

Get Premium CWAP-404 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashandra

2 days ago

B) 4-Way Handshake is the correct answer. The 4-Way Handshake is the key exchange process that establishes the session keys for WPA2-PSK encryption.

upvoted 0 times

...

Corrinne

3 days ago

I think the 4-Way Handshake is required for PSK frame decryption.

upvoted 0 times

...