Certified Ethical Hacker Wireless and IoT Security 3

Question 1

The KRACK attack against WPA2 exploits a flaw in which part of the protocol?

Accepted Answer

The four-way handshake key reinstallation

Answer

KRACK forces nonce reuse by replaying message 3 of the four-way handshake, reinstalling an already-in-use key.

Question 2

Which improvement does WPA3 introduce to resist offline dictionary attacks on the password?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

WPA3 uses SAE (Dragonfly handshake), which prevents offline dictionary attacks even with weak passwords.

Question 3

An IoT device ships with the default credentials admin/admin and exposes Telnet. Which botnet famously exploited this pattern?

Accepted Answer

Mirai

Answer

The Mirai botnet scanned for IoT devices with default Telnet credentials to build a massive DDoS network.

Question 4

Which short-range wireless protocol is commonly targeted in IoT attacks and operates in the 2.4 GHz band using 16 channels?

Accepted Answer

Zigbee

Answer

Zigbee operates in the 2.4 GHz band with 16 channels and is widely used in smart-home IoT devices.

Question 5

What is 'bluesnarfing'?

Accepted Answer

Unauthorized access to data on a Bluetooth device

Answer

Bluesnarfing is the unauthorized access and theft of information from a Bluetooth-enabled device.

Certified Ethical Hacker Practice Test