CND Wireless Network Security 1

Question 1

Which wireless security protocol introduced Simultaneous Authentication of Equals (SAE) to replace the Pre-Shared Key (PSK) handshake and eliminate offline dictionary attacks?

Accepted Answer

WPA3-Personal

Answer

WPA3-Personal replaces PSK with SAE (a Dragonfly-based handshake), which is resistant to offline dictionary attacks because an attacker cannot test a captured handshake without interacting with the network each time.

Question 2

Which encryption cipher suite is mandatory in WPA2 and provides stronger security than TKIP?

Accepted Answer

CCMP (AES)

Answer

CCMP, based on AES in Counter Mode with CBC-MAC, is the mandatory cipher suite in WPA2 and provides data confidentiality, integrity, and replay protection superior to TKIP.

Question 3

What is the primary security weakness of Wired Equivalent Privacy (WEP)?

Accepted Answer

It relies on RC4 with static, reused initialization vectors making it trivially crackable

Answer

WEP reuses 24-bit IVs and uses a flawed implementation of RC4, allowing attackers to collect enough packets to statistically recover the key in minutes using tools like Aircrack-ng.

Question 4

In an 802.1X wireless deployment, what role does the RADIUS server fulfill?

Accepted Answer

It serves as the Authentication Server (AS) that validates supplicant credentials

Answer

In 802.1X, the RADIUS server acts as the Authentication Server (AS), receiving forwarded credentials from the authenticator (AP) and making accept/reject decisions based on identity validation.

Question 5

Which IEEE 802.11 amendment introduced MU-MIMO and operates in the 6 GHz band in addition to 2.4 GHz and 5 GHz?

Accepted Answer

802.11ax (Wi-Fi 6/6E)

Answer

802.11ax (Wi-Fi 6/6E) supports MU-MIMO, OFDMA, and in its 6E variant operates in the 6 GHz band, offering greater capacity and reduced interference compared to earlier standards.

(CND) Certified Network Defender Practice Test

(CND) Certified Network Defender Practice Test

CND Wireless Network Security 1