CEH Wireless Network Hacking 2

Question 1

The KRACK (Key Reinstallation Attack) vulnerability affects which wireless security protocol?

Accepted Answer

WPA2

Answer

KRACK exploits a flaw in the WPA2 four-way handshake, allowing an attacker to force nonce reuse by replaying handshake messages, potentially decrypting encrypted traffic.

Question 2

An attacker uses airodump-ng and discovers an access point with ESSID <length: 0>. What does this indicate?

Accepted Answer

The AP has SSID broadcast disabled (hidden SSID)

Answer

When an access point's SSID broadcast is disabled, tools like airodump-ng display the ESSID as empty or with length 0; the SSID can still be discovered through probe requests from clients.

Question 3

Which Bluetooth attack allows an attacker to send unsolicited messages or files to a discoverable Bluetooth device without pairing?

Accepted Answer

Bluejacking

Answer

Bluejacking involves sending unsolicited messages (like vCards or text) to a discoverable Bluetooth device without requiring authentication or pairing.

Question 4

What technique does an attacker use to bypass MAC address filtering on a wireless network?

Accepted Answer

Sniff the WLAN to capture a legitimate client's MAC address and spoof it

Answer

MAC filtering is easily bypassed by passively monitoring the wireless network to identify an allowed MAC address, then spoofing that MAC on the attacker's wireless adapter.

Question 5

Wardriving is defined as:

Accepted Answer

Driving around in a vehicle with a Wi-Fi-enabled device to discover and map wireless networks

Answer

Wardriving involves traveling through an area while using wireless scanning tools to discover, log, and sometimes map wireless networks, often combined with GPS.

CEH Practice Test

CEH Practice Test

CEH Wireless Network Hacking 2