Certified Ethical Hacker Wireless and IoT Security 5

Question 1

A penetration tester wants to put a wireless adapter into a mode that captures all 802.11 frames in the air. Which mode is required?

Accepted Answer

Monitor mode

Answer

Monitor mode lets a wireless NIC capture all 802.11 frames, including those not addressed to it.

Question 2

Which attack denies wireless service by transmitting high-power noise on the same frequency as the target network?

Accepted Answer

RF jamming

Answer

RF jamming floods the channel with interference, preventing legitimate devices from communicating.

Question 3

What is the recommended mitigation against rogue and evil twin access points in an enterprise?

Accepted Answer

Deploying a Wireless Intrusion Prevention System (WIPS)

Answer

A WIPS continuously monitors the airspace to detect and contain rogue and evil twin access points.

Question 4

An IoT camera communicates over unencrypted HTTP. Which OWASP IoT category does this transmission flaw fall under?

Accepted Answer

Insecure data transfer and storage

Answer

Sending sensitive data over unencrypted channels falls under insecure data transfer and storage.

Question 5

Which protocol is widely used for IoT messaging and, if left unauthenticated on port 1883, can leak sensor data?

Accepted Answer

MQTT

Answer

MQTT is a lightweight publish/subscribe IoT protocol that, when unauthenticated on port 1883, exposes topics and data.

Certified Ethical Hacker Practice Test