During an assessment, a penetration tester was able to access the organization's wireless network from outside of the building using a laptop running Aircrack-ng. Which of the following should be recommended to the client to remediate this issue?
A.
Changing to Wi-Fi equipment that supports strong encryption
B. Use directional antennae.
WPA3 is very secure, but just because it's difficult doesn't mean it's not impossible. The AP may be vulnerable to a downgrade attack, and also with enough time and resources, a Dragonblood attack may leak partial data. Security needs a layered approach, why let someone access your network if they don't need it? Encryption can eventually break, better to avoid allowing this completely.
When they say outside of the building, that means directional antennas are not present inside the building. 360/omnidirectional antennas are used for wifi which is not good for security
B would be the best answer here. There is no mention the question what encryption was in use. For me the first step to stopping attacks from external locations is to install directional antennas and possibly lower the power to reduce back scatter.
The MOST effective recommendation to remediate the tester's unauthorized access is:
A. Changing to Wi-Fi equipment that supports strong encryption
Strong encryption standards like WPA2 or WPA3 significantly improve Wi-Fi security by making it much more difficult to crack the encryption and access the network traffic.
B. Using directional antennae: While directional antennae can focus the Wi-Fi signal and potentially limit range, it wouldn't prevent unauthorized access from someone within range. The tester was able to connect from outside, indicating the network was accessible beyond its intended coverage.
D. Disabling Wi-Fi: This is a drastic measure and might not be practical depending on the organization's needs. Disabling Wi-Fi completely would prevent legitimate users from accessing the network wirelessly.
Going B here. While WPA3 can't be cracked with aircrack-ng, it can still perform a downgrade attack on it. Answer A does not say REQUIRES strong encryption, just that it SUPPORTS strong encryption. The key phrase in this question IMO is "outside the building", solve this by using a directional antennae, B.
Using Aircrack-ng, an attacker can crack Wi-Fi networks that are protected using weak encryption methods. The best way to remediate this issue is to ensure that the Wi-Fi equipment supports strong encryption standards like WPA2 or WPA3.
Therefore, the correct option is:
A. Changing to Wi-Fi equipment that supports strong encryption.
Aircrack-ng is a suite of tools for wireless security auditing and testing. It can be used to detect, monitor, and crack wireless networks, as well as recover lost or forgotten passwords. Aircrack-ng also includes powerful tools for packet analysis, allowing users to capture packets and analyze them for useful information.
Disabling Wi-Fi might be a practicable stopgap for IMMEDIATE remediation, but the question seems to suggest the best long-term fix. The employees most likely need to access the network wirelessly for their work. You need to remediate it on a fulcrum where both security and user convenience is reasonably balanced.
Yes, no algorithm is impossible to crack, but the most robust, up-to-date ones are difficult enough. If the tester cracked it that easily, chances are that either the algorithm was weak or the equipment was misconfigured—both of which are fixable without deprovisioning Wi-Fi altogether.
Aircrack-ng is a Wi-Fi security auditing tool specifically 802.11 WEP and WPA/WPA2-PSK. It is also used for cracking the WEP and WPA/WPA2-PSK keys for gaining access to a network. Aircrack-ng is used by learning individuals and security professionals to test the security, reliability of wireless networks.
This section is not available anymore. Please use the main Exam Page.PT0-002 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
kinny4000
2 months, 3 weeks agopinderanttal
3 months, 4 weeks agoTa2oo
6 months, 4 weeks agopepgua
10 months, 3 weeks agoMyfeedins479
1 year agojcm3
1 year, 3 months agosolutionz
1 year, 8 months agoKingIT_ENG
2 years, 1 month agonickwen007
2 years, 1 month ago[Removed]
2 years, 1 month ago[Removed]
2 years, 1 month agoBigBeeerd
2 years, 1 month ago[Removed]
2 years, 1 month ago[Removed]
2 years, 1 month ago[Removed]
2 years, 1 month ago[Removed]
2 years, 1 month agoOrean
2 years, 1 month ago[Removed]
2 years, 1 month agobeamage
2 years, 1 month agobeamage
2 years, 1 month agobeamage
2 years, 1 month ago[Removed]
2 years, 1 month ago[Removed]
2 years, 1 month ago