MENU
During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The order should be Passive information gathering, Network level discovery, Host scanning and Analysis of host scanning.
33 comments · newest first
AF
Afton
11 months ago
Changing MAC addresses won’t help with WPA2!
HY
Hyman
11 months ago
I doubt you can’t crack WPA2, seems off.
GA
Gaynell
11 months ago
Wait, can’t we just use inSSIDer?
PH
Phil
12 months ago
Totally agree, A is the way to go.
EL
Elouise
12 months ago
Gotta capture that WPA2 handshake to crack it!
JO
Jovita
12 months ago
Changing the MAC address and using AirTraf doesn’t sound familiar to me. I think option D might be a distraction.
HE
Helga
1 year ago
I vaguely recall that WPA2 can be cracked under certain conditions, so I think option C is incorrect. It’s not completely secure, right?
DE
Delisa
1 year ago
I’m not entirely sure, but I feel like inSSIDer is more for scanning networks rather than cracking keys. Option B seems off to me.
AN
Anisha
1 year ago
I remember something about capturing the WPA2 handshake being crucial for cracking the key. I think option A sounds right.
MA
Mattie
1 year ago
The key here is to capture the WPA2 handshake, as option A suggests. Once you have that, you can use a tool like Hashcat or John the Ripper to crack the password. Just make sure you have a good wordlist or dictionary prepared.
RO
Roosevelt
1 year ago
I'm a little confused by this question. Isn't WPA2 supposed to be secure? I'm not sure if any of these options are actually viable. I'll have to review my notes on wireless security again.
PH
Phyliss
1 year ago
Hmm, I'm a bit unsure about this one. I know we covered WPA2 cracking in class, but I can't remember the exact steps. I'll have to think this through carefully.
AV
Avery
1 year ago
I'm pretty confident that the answer is A. Capturing the WPA2 handshake and then cracking it is the standard approach for this type of attack.
CH
Cherry
1 year ago
Option A sounds right to me. Capturing the handshake and then using a tool like Aircrack-ng to crack the password is the way to go. I've practiced this a few times, so I feel prepared for this type of question.
AL
Alayna
1 year ago
Hmm, I'm a bit confused. The function is called "sum" but it seems to be calculating the factorial. I'll need to double-check the logic to make sure I understand what's happening.
DE
Derrick
1 year ago
This question seems straightforward, but I want to make sure I understand the key points about NOARCHIVELOG mode before answering.
AL
Alyce
1 year ago
Okay, I've got this. The NL-SAS drives are non-volatile SAS drives, so they're likely in the lower-performance tier. I'll go with option B.
HE
Heidy
1 year ago
I heard the best way to crack WPA2 is to bake the router a nice cake. You know, social engineering!
PE
Pete
1 year ago
Changing the MAC address and using AirTraf? What is this, amateur hour? That's not how you hack WPA2.
FE
Felix
1 year ago
Changing the MAC address and using AirTraf? What is this, amateur hour? That's not how you hack WPA2.
XU
Xuan
1 year ago
B) The tester must use the tool inSSIDer to crack it using the ESSID of the network.
LE
Leonora
1 year ago
A) The tester must capture the WPA2 authentication handshake and then crack it.
CH
Chantay
1 year ago
C is completely wrong. Just because WPA2 is a standard doesn't mean it can't be cracked. That's like saying fortress walls can't be breached because they follow architectural standards.
CH
Chantell
1 year ago
C) C is completely wrong. Just because WPA2 is a standard doesn't mean it can't be cracked. That's like saying fortress walls can't be breached because they follow architectural standards.
BR
Brett
1 year ago
B) The tester must use the tool inSSIDer to crack it using the ESSID of the network.
KA
Kati
1 year ago
A) The tester must capture the WPA2 authentication handshake and then crack it.
CA
Carin
1 year ago
B is ridiculous. inSSIDer can't crack WPA2, that's just nonsense.
CA
Catherin
2 years ago
The correct answer is A. Capturing the WPA2 handshake and cracking it is the way to go. That's the standard approach for WPA2 networks.
GA
Gail
1 year ago
B) But wouldn't changing the MAC address also be a possible method to obtain the key?
BE
Bette
1 year ago
A) The tester must capture the WPA2 authentication handshake and then crack it.
JA
Jani
2 years ago
But isn't it possible to crack WPA2 if you capture the handshake and use a powerful cracking tool?
HE
Herschel
2 years ago
I disagree, I believe the answer is C) The tester cannot crack WPA2 because it is in full compliance with the IEEE 802.11i standard.
JA
Jani
2 years ago
I think the answer is A) The tester must capture the WPA2 authentication handshake and then crack it.