CCST Wireless Security Protocols (WPA) 2

Question 1

What encryption algorithm does WPA2-Personal use?

Accepted Answer

AES-CCMP

Answer

WPA2 uses AES-CCMP providing strong 128-bit encryption for wireless data frames.

Question 2

What is the main weakness of WPA2-Personal that WPA3 addresses?

Accepted Answer

The PSK four-way handshake is vulnerable to offline dictionary attacks

Answer

The captured four-way handshake can be brute-forced offline. WPA3's SAE eliminates this vulnerability.

Question 3

What is the purpose of 802.1X in WPA2-Enterprise?

Accepted Answer

To provide individual user authentication through a RADIUS server

Answer

802.1X authenticates each user individually via RADIUS using credentials or certificates.

Question 4

What is a rogue access point and how does it threaten wireless security?

Accepted Answer

An unauthorized AP that can intercept traffic or provide attackers network access

Answer

Rogue APs are unauthorized devices that bypass network security and can intercept traffic.

Question 5

What is the difference between WPA2-TKIP and WPA2-AES modes?

Accepted Answer

TKIP uses older, weaker encryption for backward compatibility; AES uses stronger AES-CCMP

Answer

TKIP provides backward compatibility with weaker RC4-based encryption; AES-CCMP is the mandatory, stronger option.

(CCST) Cisco Certified Support Technician Practice Test