Wireless and IoT Security Flashcards

A penetration tester wants to put a wireless adapter into a mode that captures all 802.11 frames in the air. Which mode is required?

Answer: Monitor mode

Monitor mode lets a wireless NIC capture all 802.11 frames, including those not addressed to it.

Which attack denies wireless service by transmitting high-power noise on the same frequency as the target network?

Answer: RF jamming

RF jamming floods the channel with interference, preventing legitimate devices from communicating.

What is the recommended mitigation against rogue and evil twin access points in an enterprise?

Answer: Deploying a Wireless Intrusion Prevention System (WIPS)

A WIPS continuously monitors the airspace to detect and contain rogue and evil twin access points.

An IoT camera communicates over unencrypted HTTP. Which OWASP IoT category does this transmission flaw fall under?

Answer: Insecure data transfer and storage

Sending sensitive data over unencrypted channels falls under insecure data transfer and storage.

Which protocol is widely used for IoT messaging and, if left unauthenticated on port 1883, can leak sensor data?

Answer: MQTT

MQTT is a lightweight publish/subscribe IoT protocol that, when unauthenticated on port 1883, exposes topics and data.

Why is the lack of a secure firmware update mechanism a critical IoT vulnerability?

Answer: It prevents patching of discovered vulnerabilities

Without secure updates, known vulnerabilities cannot be patched, leaving devices exploitable indefinitely.

Which technique hides a wireless network by not broadcasting its SSID, and why is it not a strong security control?

Answer: SSID cloaking; the SSID still appears in client probe and association frames

SSID cloaking hides the beacon's SSID, but the name is still revealed in client probe and association requests.