CompTIA Network+ Network+ Wireless Security Protocols 3

Question 1

Which EAP method uses mutual certificate-based authentication between the client and the RADIUS server?

Accepted Answer

EAP-TLS

Answer

EAP-TLS requires both the client and server to present digital certificates, providing strong mutual authentication.

Question 2

A wireless technician notices that a rogue access point is broadcasting the same SSID as the corporate network. What type of attack is this?

Accepted Answer

Evil twin

Answer

An evil twin attack uses a fraudulent AP with the same SSID to trick clients into associating with the attacker's device.

Question 3

Which WPS attack method allows an attacker to recover the WPS PIN through repeated authentication attempts exploiting a design flaw?

Accepted Answer

Pixie Dust / online PIN brute force

Answer

WPS PIN brute-force exploits the fact that the 8-digit PIN is validated in two halves, reducing the keyspace to about 11,000 combinations.

Question 4

What does 802.1X provide in a wireless network deployment?

Accepted Answer

Port-based Network Access Control (NAC)

Answer

802.1X provides port-based NAC, requiring clients to authenticate before being granted network access.

Question 5

Which of the following BEST describes the purpose of a wireless IDS (WIDS)?

Accepted Answer

Detect rogue APs and unauthorized wireless activity

Answer

A WIDS monitors the RF environment to identify rogue APs, unauthorized clients, and wireless attack patterns.

CompTIA Practice Test