Certified Ethical Hacker (CEH v11) — Question 212

You are a penetration tester tasked with testing the wireless network of your client Brakeme SA. You are attempting to break into the wireless network with the
SSID `Brakeme-Internal.` You realize that this network uses WPA3 encryption.
Which of the following vulnerabilities is the promising to exploit?

Answer options

• A. Cross-site request forgery
• B. Dragonblood
• C. Key reinstallation attack
• D. AP misconfiguration

Correct answer: B

Explanation

The Dragonblood vulnerability is specifically associated with WPA3 encryption and can be exploited to compromise the security of the wireless network. In contrast, Cross-site request forgery does not pertain to wireless networks, Key reinstallation attack targets older WPA/WPA2 protocols, and AP misconfiguration refers to incorrect settings rather than an inherent vulnerability in the encryption itself.