CNDA Wireless Network Security

Question 1

Which security improvement does WPA3 provide over WPA2 that prevents offline dictionary attacks on captured handshakes?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

WPA3 uses SAE (Dragonfly handshake) instead of PSK, which provides forward secrecy and prevents attackers from capturing handshakes for offline brute-force.

Question 2

In a wireless enterprise environment, 802.1X authentication relies on which three-party model?

Accepted Answer

Supplicant, Authenticator, Authentication Server

Answer

802.1X uses a supplicant (client device), authenticator (access point), and authentication server (typically RADIUS) to control network access.

Question 3

A network defender detects an access point broadcasting the corporate SSID but with a different BSSID and stronger signal. This is most likely which type of attack?

Accepted Answer

Evil twin attack

Answer

An evil twin is a rogue AP mimicking a legitimate SSID/BSSID to lure clients into connecting so the attacker can intercept traffic.

Question 4

Why is hiding the SSID considered an insufficient security control for wireless networks?

Accepted Answer

Clients actively probe for hidden SSIDs, revealing them in probe request frames

Answer

Devices configured for a hidden SSID broadcast probe request frames containing the SSID name, making it trivially discoverable with passive sniffing tools.

Question 5

Which fundamental cryptographic weakness made WEP completely broken and unsuitable for use?

Accepted Answer

Short 24-bit Initialization Vector reuse with RC4

Answer

WEP's 24-bit IV space is small enough to force IV reuse within minutes on a busy network, allowing attackers to recover the key using statistical attacks on RC4 keystreams.

CNDA - Certified Network Defense Architect Practice Test

CNDA - Certified Network Defense Architect Practice Test

CNDA Wireless Network Security