ALISON Wireless & Mobile Security 3

Question 1

What vulnerability in WPS (Wi-Fi Protected Setup) makes it susceptible to brute-force attacks?

Accepted Answer

The 8-digit WPS PIN is validated in two separate 4-digit halves, reducing keyspace from 10^8 to 10^4 + 10^3

Answer

WPS PIN verification splits the 8-digit PIN into two independently verified halves, reducing the effective keyspace to 11,000 combinations rather than 100 million, making brute-force trivial.

Question 2

What is a wireless deauthentication attack and why is it possible?

Accepted Answer

Sending spoofed 802.11 deauthentication frames because management frames lacked authentication before 802.11w

Answer

Before 802.11w (Protected Management Frames), deauthentication frames were unauthenticated, allowing attackers to spoof them and forcibly disconnect clients from any AP.

Question 3

What is an IMSI catcher (often called a 'Stingray') used for in security contexts?

Accepted Answer

A device that impersonates a cellular base station to intercept mobile communications and track device locations

Answer

An IMSI catcher mimics a legitimate cell tower, forcing nearby phones to connect to it, enabling interception of calls, SMS, and location data by capturing the device's IMSI.

Question 4

What is the key difference between WPA2-Personal (PSK) and WPA2-Enterprise in terms of authentication?

Accepted Answer

WPA2-Personal uses a shared password for all users; WPA2-Enterprise uses individual credentials via a RADIUS server

Answer

WPA2-Personal (PSK) uses a single shared passphrase for all users, while WPA2-Enterprise authenticates each user individually via 802.1X and a RADIUS server, providing per-user accountability.

Question 5

What Bluetooth attack passively captures device information from discoverable Bluetooth devices without owner permission?

Accepted Answer

Bluesnarfing

Answer

Bluesnarfing involves unauthorized access to information on a Bluetooth device (contacts, messages, calendar), exploiting vulnerabilities in the OBEX protocol on discoverable devices.

ALISON - Advance Learning Interactive Systems Online Practice Test

ALISON - Advance Learning Interactive Systems Online Practice Test

ALISON Wireless & Mobile Security 3