CEH Wireless Network Hacking 2

Question 1

The KRACK (Key Reinstallation Attack) vulnerability affects which wireless security protocol?

Accepted Answer

WPA2

Answer

WEP

Answer

WPA3

Answer

802.1X EAP-TLS

Question 2

An attacker uses airodump-ng and discovers an access point with ESSID <length: 0>. What does this indicate?

Accepted Answer

The AP has SSID broadcast disabled (hidden SSID)

Answer

The AP is using WPA3 encryption

Answer

The AP has no clients connected

Answer

The AP is a honeypot

Question 3

Which Bluetooth attack allows an attacker to send unsolicited messages or files to a discoverable Bluetooth device without pairing?

Accepted Answer

Bluejacking

Answer

Bluesnarfing

Answer

Bluebugging

Answer

KNOB attack

Question 4

What technique does an attacker use to bypass MAC address filtering on a wireless network?

Accepted Answer

Sniff the WLAN to capture a legitimate client's MAC address and spoof it

Answer

Replay packets captured from the network

Answer

Crack the WPA2 key first, then change MAC filtering settings

Answer

Use a directional antenna to overpower the AP signal

Question 5

Wardriving is defined as:

Accepted Answer

Driving around in a vehicle with a Wi-Fi-enabled device to discover and map wireless networks

Answer

Cracking WPA2 passwords while stationary at a coffee shop

Answer

Using a directional antenna to attack a specific building's Wi-Fi

Answer

Intercepting wireless traffic by parking near a target location

Question 6

Which tool is commonly used as a rogue access point and wireless man-in-the-middle platform, often called the 'Hacker's Swiss Army Knife for Wi-Fi'?

Accepted Answer

Wi-Fi Pineapple

Answer

Kismet

Answer

InSSIDer

Answer

NetStumbler

Question 7

In 802.11 terminology, what is a 'probe request' and how can attackers exploit it?

Accepted Answer

A management frame sent by clients searching for known networks; exploited to discover hidden SSIDs and track device movement

Answer

A management frame sent by APs to announce their presence; exploited to flood the channel

Answer

A control frame used in WPA3 handshakes; exploited via KRACK

Answer

A data frame carrying EAPOL keys; exploited to recover PMK