CompTIA Network+ Network+ Wireless Security Protocols 2

Question 1

Which WPA3 feature replaces the Pre-Shared Key (PSK) handshake to protect against offline dictionary attacks?

Accepted Answer

SAE (Simultaneous Authentication of Equals)

Answer

WPA3 uses SAE, a Dragonfly-based handshake that provides forward secrecy and resists offline brute-force attacks.

Question 2

A company deploys WPA2-Enterprise. Which server handles credential authentication for wireless clients?

Accepted Answer

RADIUS

Answer

WPA2-Enterprise uses a RADIUS server to centrally authenticate wireless clients via EAP.

Question 3

What is the primary vulnerability exploited by the KRACK (Key Reinstallation Attack) against WPA2?

Accepted Answer

The four-way handshake nonce reuse

Answer

KRACK forces nonce reuse during the WPA2 four-way handshake, allowing an attacker to decrypt traffic.

Question 4

Which cipher suite does WPA2 mandate for protecting data confidentiality?

Accepted Answer

CCMP/AES

Answer

WPA2 requires CCMP with AES-128 for data encryption, replacing the weaker TKIP used in WPA.

Question 5

An attacker captures the WPA2 four-way handshake and runs an offline password cracking tool. Which preventive measure is MOST effective?

Accepted Answer

Using a long, complex passphrase

Answer

A strong, complex passphrase makes offline dictionary and brute-force attacks computationally infeasible.

CompTIA Practice Test