CCST Wireless Security Protocols (WPA) 2

Question 1

What encryption algorithm does WPA2-Personal use?

Accepted Answer

AES-CCMP

Answer

RC4

Answer

TKIP

Answer

DES

Question 2

What is the main weakness of WPA2-Personal that WPA3 addresses?

Accepted Answer

The PSK four-way handshake is vulnerable to offline dictionary attacks

Answer

WPA2 does not encrypt data

Answer

WPA2 does not support 5 GHz

Answer

WPA2 only works with older devices

Question 3

What is the purpose of 802.1X in WPA2-Enterprise?

Accepted Answer

To provide individual user authentication through a RADIUS server

Answer

To increase signal range

Answer

To enable faster speeds

Answer

To reduce access points needed

Question 4

What is a rogue access point and how does it threaten wireless security?

Accepted Answer

An unauthorized AP that can intercept traffic or provide attackers network access

Answer

A misconfigured AP that drops traffic

Answer

An AP with outdated firmware

Answer

An AP supporting only WEP

Question 5

What is the difference between WPA2-TKIP and WPA2-AES modes?

Accepted Answer

TKIP uses older, weaker encryption for backward compatibility; AES uses stronger AES-CCMP

Answer

No difference

Answer

TKIP is faster

Answer

AES only works on 5 GHz

Question 6

What is Protected Management Frames (PMF) and why is it important?

Accepted Answer

A mechanism encrypting management frames to prevent deauthentication attacks

Answer

A feature increasing signal strength

Answer

A protocol for managing multiple APs

Answer

A method for prioritizing management traffic