CompTIA PenTest+ (PT0-002) — Question 413

A company's Chief Executive Officer has created a secondary home office and is concerned that the WiFi service being used is vulnerable to an attack. A penetration tester is hired to test the security of the WiFi's router.
Which of the following is MOST vulnerable to a brute-force attack?

Answer options

• A. WPS
• B. WPA2-EAP
• C. WPA-TKIP
• D. WPA2-PSK

Correct answer: A

Explanation

WPS (WiFi Protected Setup) is particularly vulnerable to brute-force attacks because it has a limited number of PIN combinations, making it easier for attackers to guess the correct one. In contrast, WPA2-EAP, WPA-TKIP, and WPA2-PSK utilize stronger encryption and authentication methods, making them significantly more resilient against such attacks.