Exam CISSP topic 1 question 449 discussion

WPA2 (Wi-Fi Protected Access 2) is designed to provide strong encryption and security for wireless networks. One of its key features is protection against replay attacks. Replay attacks involve intercepting and retransmitting legitimate data to gain unauthorized access or perform malicious actions. WPA2 uses a mechanism called Temporal Key Integrity Protocol (TKIP) and later AES encryption to protect against such attacks.

Tricky. Not A - WPA2 provides encryption, but "encryption control" is not a formal security feature term.

LOL, isn't it true that each WiFi standard have some kind of "encryption control" built into them? Option A is too vague and general to say it is exclusively designed into WPA2. WPA2 with CCMP ensures data integrity and prevents replay attacks by using encryption keys for each data packet. WEP, WPA, WPA2 with TKIP inherits the replay attack vulnerabilities.

A. Encryption control. WPA and WPA2 both have Replay Attack vulnerabilities not protection as suggested in Answer D. https://ostec.blog/en/general/krack-vunerability-wpa2/#:~:text=This%20vulnerability%20enables%20a%20malicious,messaging%2C%20and%20credit%20card%20numbers.

TKIP is a protection against replay attacks, it is included in WPA and WPA2, the main feature in WPA2 compared to WPA is encryption with AES.

A. Encryption control. WPA2 primarily focuses on encryption to secure wireless communications. It uses strong encryption algorithms, such as Advanced Encryption Standard (AES), to protect data transmitted over Wi-Fi networks from eavesdropping and unauthorized access. This encryption helps ensure the confidentiality and integrity of the data being transmitted. While WPA2 provides some level of security against various types of attacks, its primary strength lies in encryption control.

A. "A benefit of the WPA2 system was that it introduced the Advanced Encryption System (AES) to replace the more vulnerable TKIP system used in the original WPA protocol" https://www.avast.com/c-wep-vs-wpa-or-wpa2#:~:text=WPA2%20ensures%20that%20data%20sent,in%20the%20original%20WPA%20protocol.

WPA2 is primarily designed to provide secure wireless network connections, and one of its main security features is protection against replay attacks. This is achieved by using a countermeasure known as replay attack protection, which ensures that each data packet is unique and cannot be replayed by an attacker to gain unauthorized access to the network. WPA2 also includes encryption control to ensure that data transmitted over the wireless network is secure and cannot be intercepted and read by unauthorized users.

WPA2 introduced AES-CCMP. WPA had tkip. WEP had RC4

Encryption is the best answer here. Moving away from RC4 in WPA to WPA2.

Replay Protection is implemented in WPA3 WPA2 is vulnerable to Replay attacks such as "KRACK"