CEH Wireless Network Hacking 3

Question 1

WPA3's Simultaneous Authentication of Equals (SAE) replaces PSK to defend against which specific attack class?

Accepted Answer

Offline dictionary and brute-force attacks against captured handshakes

Answer

WPA3-SAE (Dragonfly handshake) provides forward secrecy and prevents offline dictionary attacks because the authentication requires real-time interaction with the AP, making captured traffic useless for offline cracking.

Question 2

The PMKID attack on WPA2 is advantageous over traditional handshake capture because:

Accepted Answer

It requires only a single EAPOL frame from the AP and does not require a client to be present

Answer

The PMKID attack extracts a cryptographic identifier from a single EAPOL frame sent by the AP, eliminating the need to wait for a client to authenticate, making it faster and more reliable.

Question 3

Which 802.11 standard introduced both the 2.4 GHz and 5 GHz dual-band capability and commonly achieves speeds up to 600 Mbps using MIMO technology?

Accepted Answer

802.11n

Answer

802.11n (Wi-Fi 4) introduced dual-band operation on 2.4 GHz and 5 GHz and uses Multiple-Input Multiple-Output (MIMO) antenna technology to achieve up to 600 Mbps throughput.

Question 4

A Bluesnarfing attack differs from Bluejacking in that Bluesnarfing:

Accepted Answer

Unauthorized access to information on a Bluetooth device such as contacts, calendar, and messages

Answer

Bluesnarfing involves unauthorized extraction of data (contacts, messages, calendar entries) from a Bluetooth-enabled device, whereas Bluejacking only sends unsolicited messages.

Question 5

What is the purpose of configuring a wireless adapter in 'monitor mode' during a wireless assessment?

Accepted Answer

To allow the adapter to capture all 802.11 frames in range, including frames not addressed to it

Answer

Monitor mode (also called RFMON) allows a wireless adapter to passively capture all 802.11 frames on a channel regardless of the destination address, enabling network analysis and handshake capture.

CEH Practice Test

CEH Practice Test

CEH Wireless Network Hacking 3