SSCP Network and Communications Security Practice Question
A security administrator is hardening a wireless network. Which TWO of the following should be avoided due to known vulnerabilities?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
WEP
WEP and WPA2-PSK have known vulnerabilities; WEP is broken, and WPA2-PSK is vulnerable to offline dictionary attacks (PMKID, KRACK).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
WPA3-Enterprise
Why it's wrong here
WPA3-Enterprise is the most secure.
- ✗
WPA3-Personal
Why it's wrong here
WPA3-Personal uses SAE and is secure.
- ✓
WEP
Why this is correct
WEP is broken and should not be used.
- ✓
WPA2-PSK
Why this is correct
WPA2-PSK is vulnerable to KRACK and offline attacks.
- ✗
WPA2-Enterprise
Why it's wrong here
WPA2-Enterprise uses 802.1X and is secure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which attack exploits the lack of IV (Initialization Vector) randomness in the RC4 algorithm to recover the Wi-Fi password, and is considered completely broken?
hard- ✓ A.WEP IV attack
- B.PMKID attack
- C.Evil twin attack
- D.KRACK attack
Why A: WEP uses RC4 with weak IVs that can be captured and analyzed to recover the key, making WEP completely insecure.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.