CND Wireless Network Security 2

Question 1

An attacker sends 802.11 deauthentication frames spoofed as the legitimate access point to disconnect clients. What attack is being performed?

Accepted Answer

Deauthentication/Disassociation attack (DoS)

Answer

A deauthentication attack exploits the unauthenticated nature of 802.11 management frames, allowing an attacker to forge de-auth frames and disconnect legitimate clients from an AP.

Question 2

KRACK (Key Reinstallation Attack) targets which phase of the WPA2 protocol?

Accepted Answer

The 4-way handshake used to establish session keys

Answer

KRACK manipulates retransmissions in the WPA2 4-way handshake to force nonce reuse, allowing decryption and potentially injection of traffic by reinstalling an already-in-use cryptographic key.

Question 3

An attacker sets up a wireless access point near a coffee shop that mimics the legitimate free Wi-Fi, hoping users will connect to it. This is known as which attack?

Accepted Answer

Evil twin attack

Answer

An evil twin attack creates a fraudulent AP that mimics a legitimate one, tricking users into connecting so the attacker can intercept traffic, capture credentials, or conduct man-in-the-middle attacks.

Question 4

The Wi-Fi Protected Setup (WPS) PIN method was found to be vulnerable to brute-force attacks requiring fewer than 11,000 guesses rather than 100 million. What design flaw causes this?

Accepted Answer

The 8-digit PIN is validated in two halves independently, reducing the keyspace

Answer

WPS validates the first 4 digits of the PIN separately from the last 4 (minus a checksum digit), reducing the brute-force space from 10^8 to roughly 10^4 + 10^3 = ~11,000 guesses.

Question 5

Wardriving is a reconnaissance technique used to discover wireless networks. Which tool combination is most commonly associated with wardriving on Linux?

Accepted Answer

Kismet + GPS receiver

Answer

Kismet is a passive wireless network detector and sniffer, and when combined with a GPS receiver it can map discovered networks geographically, which is the core capability used in wardriving.

(CND) Certified Network Defender Practice Test

(CND) Certified Network Defender Practice Test

CND Wireless Network Security 2