Given:You manage a wireless network that services 200 wireless users. Your facility requires 20 access points and you have installed an IEEE 802.1X LEAP with AES CCMP as an authentication and encryption solution.In this configuration the wireless network is initially susceptible to what type of attacks?(Choose 2)
A.
Eavesdropping
B.
Offline dictionary
C.
Layer 1 DoS
D.
Session hijacking
E.
Man-in-the-middle
F.
Layer 3 peer-to-peer
Explanation:
LEAP was developed by Cisco in 2001 as an improved version of Extensible Authentication Protocol-MD5 was and it was released as an IEEE 802.1X Extensible Authentication Protocol (EAP) authentication type LEAP transmits Challenge-Handshake Authentication Protocol (CHAP) negotiations in the open without the benefit of an encrypted tunnel. Thus, LEAP is prone to offline dictionary and brute force attacks http://www.infinitel00p.com/library/wifisecHTML/WiFi.Security.htm The systems protected by LEAP are still vulnerable to MITM attacks http://it.toolbox.com/wiki/index.php/Man-in-the-Middle_Attack