CNDA Wireless Network Security

Question 1

Which security improvement does WPA3 provide over WPA2 that prevents offline dictionary attacks on captured handshakes?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

RC4 stream cipher replacement

Answer

Increased IV length to 128 bits

Answer

Certificate-based client authentication

Question 2

In a wireless enterprise environment, 802.1X authentication relies on which three-party model?

Accepted Answer

Supplicant, Authenticator, Authentication Server

Answer

Client, Access Point, LDAP Server

Answer

Client, Firewall, RADIUS Proxy

Answer

Device, Controller, Certificate Authority

Question 3

A network defender detects an access point broadcasting the corporate SSID but with a different BSSID and stronger signal. This is most likely which type of attack?

Accepted Answer

Evil twin attack

Answer

Beacon flooding

Answer

Deauthentication attack

Answer

SSID squatting

Question 4

Why is hiding the SSID considered an insufficient security control for wireless networks?

Accepted Answer

Clients actively probe for hidden SSIDs, revealing them in probe request frames

Answer

Hidden SSIDs still appear in beacon frames at full power

Answer

Hidden SSIDs disable WPA2 authentication

Answer

SSID hiding is not supported on 5 GHz bands

Question 5

Which fundamental cryptographic weakness made WEP completely broken and unsuitable for use?

Accepted Answer

Short 24-bit Initialization Vector reuse with RC4

Answer

Use of SHA-1 for integrity checking

Answer

Lack of a 4-way handshake

Answer

Absence of certificate-based mutual authentication

Question 6

A wireless IDS (WIDS) has flagged a large number of deauthentication frames targeting all clients on an AP. What is the most likely intent of this activity?

Accepted Answer

Forcing clients to reassociate to capture the 4-way WPA2 handshake

Answer

RF spectrum analysis

Answer

Testing AP load balancing

Answer

Triggering 802.11r fast BSS transition

Question 7

Which encryption protocol replaced TKIP in WPA2 and provides stronger confidentiality through AES in counter mode?

Accepted Answer

CCMP (Counter Mode CBC-MAC Protocol)

Answer

GCMP (Galois/Counter Mode Protocol)

Answer

WRAP (Wireless Robust Authenticated Protocol)

Answer

LEAP (Lightweight Extensible Authentication Protocol)