CompTIA CySA+ (CS0-001) — Question 67

A company has implemented WPA2, a 20-character minimum for the WiFi passphrase, and a new WiFi passphrase every 30 days, and has disabled SSID broadcast on all wireless access points. Which of the following is the company trying to mitigate?

Answer options

• A. Downgrade attacks
• B. Rainbow tables
• C. SSL pinning
• D. Forced deauthentication

Correct answer: A

Explanation

The company's measures are designed to prevent downgrade attacks, which exploit weaker security protocols by forcing a connection to a less secure version. While rainbow tables target hashed passwords, SSL pinning and forced deauthentication do not relate to the specific actions taken by the company in this scenario.