ALISON Wireless & Mobile Security 1 — Questions and Answers
Question 1: Which encryption protocol was introduced to replace the vulnerable WEP standard in wireless networks?
- WPA (Wi-Fi Protected Access) (Correct answer)
- AES-256
- SSL/TLS
- IPsec
Correct answer: WPA (Wi-Fi Protected Access)
WPA was specifically designed as an interim replacement for WEP, using TKIP for stronger encryption while maintaining backward compatibility.
Question 2: What encryption algorithm does WPA2 use to secure wireless communications?
- RC4
- DES
- AES with CCMP (Correct answer)
- 3DES
Correct answer: AES with CCMP
WPA2 uses AES (Advanced Encryption Standard) with CCMP (Counter Mode CBC-MAC Protocol), providing much stronger security than WEP's RC4.
Question 3: What is a rogue access point in network security?
- A misconfigured router with outdated firmware
- An unauthorized wireless access point installed on a network without admin approval (Correct answer)
- An access point that uses an outdated encryption protocol
- A public Wi-Fi hotspot with no password
Correct answer: An unauthorized wireless access point installed on a network without admin approval
A rogue access point is an unauthorized AP connected to a network, which attackers or insiders can use to bypass perimeter security and intercept traffic.
Question 4: What does SSID stand for in the context of wireless networking?
- Secure Session Identification Directive
- Service Set Identifier (Correct answer)
- System Security ID Data
- Subnet Specific Interface Descriptor
Correct answer: Service Set Identifier
SSID stands for Service Set Identifier, which is the name that identifies a specific wireless network and is broadcast in beacon frames.
Question 5: Which IEEE standard defines port-based Network Access Control (NAC) used in enterprise wireless authentication?
- IEEE 802.11n
- IEEE 802.3af
- IEEE 802.1X (Correct answer)
- IEEE 802.15.1
Correct answer: IEEE 802.1X
IEEE 802.1X provides port-based NAC, requiring devices to authenticate (often via RADIUS) before gaining network access, commonly used in WPA2-Enterprise.
Question 6: In a wireless evil twin attack, what does the attacker deploy to capture victim credentials?
- A packet sniffer on the legitimate network
- A malicious access point mimicking a legitimate Wi-Fi network's SSID (Correct answer)
- A brute-force tool targeting WPA2 handshakes
- A keylogger installed on the target device
Correct answer: A malicious access point mimicking a legitimate Wi-Fi network's SSID
In an evil twin attack, the attacker creates a fake AP with the same SSID as a legitimate network, luring users to connect and then intercepting their traffic or credentials.
Question 7: What is the primary purpose of disabling SSID broadcasting on a wireless access point?
- It prevents all unauthorized devices from connecting
- It encrypts the SSID so only known clients can see it
- It provides security through obscurity by hiding the network name from passive scans (Correct answer)
- It enables MAC address filtering automatically
Correct answer: It provides security through obscurity by hiding the network name from passive scans
Disabling SSID broadcast is a security-through-obscurity measure; the network still exists and can be discovered by active scanning tools, so it provides minimal real protection.
ALISON Wireless & Mobile Security 1
Which encryption protocol was introduced to replace the vulnerable WEP standard in wireless networks?