CNDA Wireless Network Security 3

Question 1

An organization is deploying wireless in a high-security environment. Which 802.11 amendment introduced the robust security network (RSN) framework that WPA2 is based on?

Accepted Answer

802.11i

Answer

IEEE 802.11i introduced the Robust Security Network (RSN) framework, defining CCMP/AES encryption and the 4-way handshake that became the foundation of WPA2.

Question 2

Management frame protection (MFP), standardized in 802.11w, defends against which class of wireless attack?

Accepted Answer

Spoofed deauthentication and disassociation frame attacks

Answer

802.11w cryptographically protects management frames (including deauthentication and disassociation), preventing attackers from spoofing these frames to disconnect clients.

Question 3

Which Bluetooth security mode requires both devices to authenticate and encrypt all communications, making it the most secure pairing option?

Accepted Answer

Security Mode 4 (SSP — Secure Simple Pairing)

Answer

Bluetooth Security Mode 4 (Secure Simple Pairing) uses ECDH key exchange for mutual authentication and mandatory encryption, providing the strongest protection against eavesdropping.

Question 4

A penetration tester uses a wireless adapter in monitor mode to capture 802.11 frames without associating to any AP. This technique is called what?

Accepted Answer

Passive sniffing

Answer

Passive sniffing (monitor mode) captures all 802.11 frames in range without transmitting, making it undetectable to standard WIDS that look for association attempts.

Question 5

In an enterprise WLAN, which protocol allows a client to roam between access points without re-performing full 802.1X authentication, reducing latency?

Accepted Answer

802.11r (Fast BSS Transition)

Answer

802.11r enables fast BSS transition (FT) by pre-establishing PMK-R1 key hierarchies, allowing clients to roam with minimal re-authentication delay.

CNDA - Certified Network Defense Architect Practice Test

CNDA - Certified Network Defense Architect Practice Test

CNDA Wireless Network Security 3