Certified Ethical Hacker Wireless and IoT Security 4

Question 1

In an enterprise WPA2-Enterprise deployment, which server authenticates users via 802.1X?

Accepted Answer

RADIUS server

Answer

WPA2-Enterprise uses 802.1X with a RADIUS server to authenticate individual users rather than a shared key.

Question 2

An attacker captures the PMKID directly from an AP without needing a client. This clientless attack targets which technology?

Accepted Answer

WPA/WPA2 with roaming enabled

Answer

The PMKID attack extracts a hash from the AP's first handshake message, enabling clientless WPA/WPA2 cracking.

Question 3

What is the main purpose of MAC address filtering on a wireless network, and why is it weak?

Accepted Answer

It restricts which devices connect but MACs can be spoofed

Answer

MAC filtering limits which devices may connect, but attackers can sniff and spoof an allowed MAC address.

Question 4

Which attack involves sending unsolicited messages to nearby Bluetooth devices?

Accepted Answer

Bluejacking

Answer

Bluejacking sends unsolicited messages to Bluetooth devices, typically as a nuisance rather than data theft.

Question 5

Bluebugging gives an attacker what capability over a victim's Bluetooth phone?

Accepted Answer

Remote control of the device's commands and calls

Answer

Bluebugging exploits Bluetooth to gain remote control over the device, allowing calls, messages, and command execution.

Certified Ethical Hacker Practice Test