ALISON Wireless & Mobile Security 3

Question 1

What vulnerability in WPS (Wi-Fi Protected Setup) makes it susceptible to brute-force attacks?

Accepted Answer

The 8-digit WPS PIN is validated in two separate 4-digit halves, reducing keyspace from 10^8 to 10^4 + 10^3

Answer

WPS uses WEP encryption by default when enabled

Answer

WPS disables WPA2 encryption during the setup process

Answer

WPS requires the SSID to be broadcast, exposing the network to passive scanning

Question 2

What is a wireless deauthentication attack and why is it possible?

Accepted Answer

Sending spoofed 802.11 deauthentication frames because management frames lacked authentication before 802.11w

Answer

A brute-force attack on WPA2 pre-shared keys captured during handshakes

Answer

Flooding an AP with fake association requests to exhaust its connection table

Answer

Jamming the 2.4 GHz band with radio frequency interference to disconnect clients

Question 3

What is an IMSI catcher (often called a 'Stingray') used for in security contexts?

Accepted Answer

A device that impersonates a cellular base station to intercept mobile communications and track device locations

Answer

A tool for analyzing Wi-Fi packet captures in real time

Answer

A forensic tool for extracting data from locked smartphones

Answer

Software that detects rogue access points on corporate networks

Question 4

What is the key difference between WPA2-Personal (PSK) and WPA2-Enterprise in terms of authentication?

Accepted Answer

WPA2-Personal uses a shared password for all users; WPA2-Enterprise uses individual credentials via a RADIUS server

Answer

WPA2-Enterprise uses AES encryption while WPA2-Personal uses TKIP

Answer

WPA2-Enterprise is only available on 5 GHz bands while WPA2-Personal supports 2.4 GHz

Answer

WPA2-Personal supports 802.11w protected frames while WPA2-Enterprise does not

Question 5

What Bluetooth attack passively captures device information from discoverable Bluetooth devices without owner permission?

Accepted Answer

Bluesnarfing

Answer

Bluejacking

Answer

Bluebugging

Answer

Bluetoothing

Question 6

What does TKIP stand for and why was it introduced?

Accepted Answer

Temporal Key Integrity Protocol — as a WPA improvement over WEP's static key reuse

Answer

Trusted Key Integrity Protocol — to replace RSA in wireless environments

Answer

Transport Key Interchange Protocol — for secure key exchange in VPNs

Answer

Two-factor Key Integration Protocol — for multi-factor Wi-Fi authentication

Question 7

What is the purpose of a captive portal in wireless networking?

Accepted Answer

To require users to authenticate or agree to terms before gaining full network access

Answer

To encrypt all traffic between clients and the access point

Answer

To block access to known malicious websites at the network layer

Answer

To isolate wireless clients from each other on the same network segment