37. A technician reports that a SOHO wireless network was compromised by an attacker who brute forced a password to gain access. The attacker was able to modify the DNS settings on the router and spread malware to the entire network. Which of the following configurations would most likely have allowed the attack to take place? (Select two).
Answer: C,D
WPS and Default login configurations most likely allowed the attack to take place.
The vulnerability of the network can be attributed to the presence of WPS (Wi-Fi Protected Setup) and the use of a default login, which are both known to facilitate unauthorized access.
A) Guest network
A guest network typically operates on a separate subnet and restricts access to internal resources, making it less likely that an attacker could gain access to the main network. Therefore, this option does not directly contribute to the compromise described.
B) TKIP
TKIP (Temporal Key Integrity Protocol) is a security protocol designed to enhance WEP security. While it is less secure than more modern encryption methods like AES, it does not inherently allow for unauthorized access or modification of network settings, making it an unlikely factor in the attack.
C) WPS
WPS is a feature intended to simplify the connection of devices to a wireless network. However, it is known to have vulnerabilities that can be exploited through brute-force attacks, allowing an attacker to easily gain access to the network. This makes WPS a significant factor in the compromise.
D) Default login
Using a default login for the router presents a major security risk, as many attackers are aware of standard default credentials. If the attacker was able to utilize such credentials, it would facilitate unauthorized modifications to the router settings, including DNS changes. Thus, this option is critical in understanding how the attack occurred.
E) WEP
WEP (Wired Equivalent Privacy) is an outdated and insecure encryption protocol that has been largely replaced by more secure methods. While it is weak, the scenario indicates that the attacker accessed the network by exploiting other vulnerabilities rather than directly leveraging WEP.
F) AES
AES (Advanced Encryption Standard) is a strong encryption protocol that offers robust security for wireless networks. If the network had been using AES, it would significantly reduce the likelihood of a successful brute-force attack, making this option irrelevant in the context of the compromise described.
Conclusion
In summary, the configurations of WPS and the use of a default login are primarily responsible for the network compromise. Both options expose the network to easy exploitation, allowing the attacker to modify critical settings and spread malware. Other options, while they may present certain vulnerabilities, do not directly correlate to the breach as effectively as WPS and default login usage do.