Exam 312-50v13 topic 1 question 81 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 81
Topic #: 1

You are a penetration tester tasked with testing the wireless network of your client Brakeme SA. You are attempting to break into the wireless network with the SSID “Brakeme-Internal.” You realize that this network uses WPA3 encryption.
Which of the following vulnerabilities is the promising to exploit?

A. Cross-site request forgery
B. Dragonblood
C. Key reinstallation attack
D. AP misconfiguration

Show Suggested Answer

Suggested Answer: B 🗳️

by NikoTomas at March 13, 2025, 7:35 p.m.

Comments

Submit Cancel

KnightHeart

1 week, 6 days ago

Selected Answer: D

D. AP misconfigurations are agnostic to the encryption standard and can be exploited regardless of WPA3's presence. For example, a misconfigured AP might still use a weak PSK, allow legacy protocols (e.g., WPA2), or have other vulnerabilities that bypass encryption.

upvoted 1 times

...

NikoTomas

2 months, 4 weeks ago

Selected Answer: B

Answer: B (Dragonblood) Dragonblood attack targeting WPA3 handshake (called Dragonfly) si side channel attack, which is more feasible / easier to perform and recover wifi password than Key reinstallation attack (KRACK). Both attacks require unpatched WiFi device.

upvoted 1 times

KnightHeart

1 week, 6 days ago

WPA3 uses SAE as its key exchange mechanism, but Dragonblood specifically targets WPA2 implementations. While SAE is part of WPA3, Dragonblood vulnerabilities are more applicable to WPA2. WPA3's SAE implementation includes mitigations, making this less effective

upvoted 1 times

...