Exam CISSP topic 1 question 449 discussion

LOL, isn't it true that each WiFi standard have some kind of "encryption control" built into them? Option A is too vague and general to say it is exclusively designed into WPA2. WPA2 with CCMP ensures data integrity and prevents replay attacks by using encryption keys for each data packet. WEP, WPA, WPA2 with TKIP inherits the replay attack vulnerabilities.

A. Encryption control. WPA and WPA2 both have Replay Attack vulnerabilities not protection as suggested in Answer D. https://ostec.blog/en/general/krack-vunerability-wpa2/#:~:text=This%20vulnerability%20enables%20a%20malicious,messaging%2C%20and%20credit%20card%20numbers.

TKIP is a protection against replay attacks, it is included in WPA and WPA2, the main feature in WPA2 compared to WPA is encryption with AES.

A. Encryption control. WPA2 primarily focuses on encryption to secure wireless communications. It uses strong encryption algorithms, such as Advanced Encryption Standard (AES), to protect data transmitted over Wi-Fi networks from eavesdropping and unauthorized access. This encryption helps ensure the confidentiality and integrity of the data being transmitted. While WPA2 provides some level of security against various types of attacks, its primary strength lies in encryption control.

A. "A benefit of the WPA2 system was that it introduced the Advanced Encryption System (AES) to replace the more vulnerable TKIP system used in the original WPA protocol" https://www.avast.com/c-wep-vs-wpa-or-wpa2#:~:text=WPA2%20ensures%20that%20data%20sent,in%20the%20original%20WPA%20protocol.

WPA2 is primarily designed to provide secure wireless network connections, and one of its main security features is protection against replay attacks. This is achieved by using a countermeasure known as replay attack protection, which ensures that each data packet is unique and cannot be replayed by an attacker to gain unauthorized access to the network. WPA2 also includes encryption control to ensure that data transmitted over the wireless network is secure and cannot be intercepted and read by unauthorized users.

WPA2 introduced AES-CCMP. WPA had tkip. WEP had RC4

Encryption is the best answer here. Moving away from RC4 in WPA to WPA2.

Replay Protection is implemented in WPA3 WPA2 is vulnerable to Replay attacks such as "KRACK"