312-50 Question 392
Single answer▪ Wireless Security ToolsDuring an authorized wireless assessment, you are asked to determine whether a nearby corporate Wi-Fi network is still vulnerable to legacy WEP attacks. You have already placed your wireless adapter into monitor mode and confirmed that the target access point is using WEP. The environment is quiet, with very little client traffic, so passive packet capture is too slow to collect enough IVs. Which tool is the most appropriate to actively stimulate traffic so you can gather sufficient packets for a WEP key recovery attempt?
- A
aireplay-ng
- B
aircrack-ng
- C
airodump-ng
- D
Kismet
Show answer and explanation
Correct answer: A
Explanation
In a realistic WEP assessment, the usual workflow is: use airodump-ng to identify the target and capture traffic, use aireplay-ng to inject or replay frames when the network is too quiet, and then use aircrack-ng to attempt WEP key recovery after enough IVs are collected. Kismet is useful for passive wireless reconnaissance but is not the primary tool for active packet injection. This aligns with standard Aircrack-ng suite usage and common wireless testing methodology documented by the Aircrack-ng project, where traffic stimulation is often necessary because WEP attacks depend on collecting a sufficient number of IVs.
- A. Correct.
Correct. aireplay-ng is used to inject frames and generate traffic in wireless assessments. In a low-traffic WEP environment, an assessor commonly uses aireplay-ng for attacks such as ARP request replay or fake authentication to stimulate packet generation and rapidly collect IVs needed for WEP cracking. This is the practical tool choice when passive capture alone is insufficient.
- B. Incorrect.
Incorrect. aircrack-ng is primarily used to analyze captured packets and attempt key recovery, including WEP cracking once enough IVs have been collected. It does not serve as the main tool for generating wireless traffic on the target network. A candidate might choose this because it is strongly associated with WEP attacks, but its role comes later in the workflow.
- C. Incorrect.
Incorrect. airodump-ng is used to capture packets, identify access points and clients, and save traffic for later analysis. It is essential for monitoring and recording IVs, but it does not actively inject packets to stimulate additional traffic. This distractor reflects the common misconception that packet capture tools also perform traffic generation.
- D. Incorrect.
Incorrect. Kismet is a passive wireless network detector, sniffer, and IDS tool. It is valuable for discovery and passive monitoring, but it is not the preferred tool in the Aircrack-ng suite for active frame injection to accelerate WEP IV collection. Someone might pick Kismet because it is a well-known wireless tool, but it is not the best fit for this task.