Network And Perimeter Exploitation →hardMultiple ChoiceObjective-mapped

CPENT Network And Perimeter Exploitation Practice Question

A penetration tester is auditing an organization's wireless network and discovers an enterprise WPA2-Enterprise deployment utilizing PEAP-MSCHAPv2. Which tool can be used to set up a rogue RADIUS authentication server to capture enterprise user credentials when clients mistakenly associate?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Hostapd-mana

EAPHammer or Hostapd-mana are specialized tools used to execute rogue access point attacks and evil twin attacks against WPA2/WPA3 Enterprise networks to capture credentials.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Aircrack-ng
Why it's wrong here
Aircrack-ng is used for cracking WPA-PSK pre-shared keys and WEP, not enterprise rogue RADIUS attacks.
✓
Hostapd-mana
Why this is correct
Hostapd-mana is a modified hostapd designed to harvest credentials from Enterprise Wi-Fi clients.
✗
Reaver
Why it's wrong here
Reaver is used for WPS (Wi-Fi Protected Setup) brute-force attacks.
✗
Kismet
Why it's wrong here
Kismet is a wireless sniffer, intrusion detection system, and wardriving tool.

Quick reference

AAA Protocol Comparison

Protocol	Port(s)	Encryption	Transport	Primary Use
RADIUS	1812 / 1813	Password only	UDP	Network access control
TACACS+	49	Full packet	TCP	Device administration
Diameter	3868	Full session	TCP / SCTP	Carrier / mobile networks
802.1X	—	EAP-based	Layer 2	Port-based access control

TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.

About these practice questions

This CPENT question is part of Courseiva's 274-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Scored practice sessions

Quick scored rounds with instant marking and a written explanation per question.

Free CPENT Practice Test 3 — 30 Questions→CPENT Practice Test 2 — 25 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Network And Perimeter Exploitation Active Directory Attacks Privilege Escalation Lateral Movement And Post Exploitation

Filter by question format

Filter questions by type — troubleshooting, exhibit, drag-and-drop, multi-select, and more.

Browse scenarios

Topic-level practice

Each topic page collects the questions that test one concept, plus the theory behind it.

Network And Perimeter Exploitation practice questions Cloud And Hybrid Infrastructure Security practice questions CPENT fundamentals practice questions Active Directory Attacks practice questions CPENT troubleshooting practice questions

Where to go next

CPENT practice test Study guide All EC-Council practice questions

This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.