CNDA Wireless Network Security 2

Question 1

WPS PIN authentication was deprecated primarily because of which vulnerability?

Accepted Answer

PINs could be brute-forced in under 11,000 attempts due to split-PIN validation

Answer

WPS used MD5 hashing for PIN storage

Answer

WPS PINs were transmitted in cleartext over the air

Answer

WPS disabled WPA2 encryption during the enrollment phase

Question 2

The KRACK (Key Reinstallation Attack) vulnerability targeted which phase of the WPA2 protocol?

Accepted Answer

The 4-way handshake nonce and key reinstallation

Answer

EAP-TLS certificate exchange

Answer

RADIUS server CHAP authentication

Answer

TKIP MIC (Michael) integrity check

Question 3

A network architect wants to isolate guest Wi-Fi users from the corporate LAN. Which design approach is most effective?

Accepted Answer

Assign guest users to a separate VLAN with ACLs blocking internal subnets

Answer

Use SSID hiding on the corporate network

Answer

Enable client isolation only on the corporate SSID

Answer

Deploy a captive portal without VLAN segmentation

Question 4

Which EAP method provides mutual authentication using digital certificates on both the client and the server?

Accepted Answer

EAP-TLS

Answer

EAP-MD5

Answer

EAP-FAST

Answer

PEAP-MSCHAPv2

Question 5

During a wireless site survey, a security architect discovers overlapping channels 1, 6, and 11 in the 2.4 GHz band being used correctly. Why are these specific channels chosen?

Accepted Answer

They are the only three non-overlapping channels in 2.4 GHz

Answer

They are the only channels that support WPA3

Answer

They provide maximum range due to lower frequency

Answer

They are reserved for enterprise 802.1X use

Question 6

MAC address filtering as a wireless security control is ineffective primarily because of what reason?

Accepted Answer

MAC addresses are transmitted in cleartext and can be spoofed by an attacker

Answer

Access points cannot store more than 255 MAC addresses

Answer

MAC filtering disables WPA2 CCMP encryption

Answer

Modern operating systems randomize MACs every connection

Question 7

A WIDS alert indicates 'beacon flooding' on the wireless network. What is the primary impact of this attack?

Accepted Answer

Denial of service by overwhelming client scanning queues with thousands of fake SSIDs

Answer

Exhaustion of DHCP address pool

Answer

Capture of WPA2 4-way handshakes from all clients

Answer

Forced downgrade from WPA3 to WPA2