Network+ Wireless Security Protocols Flashcards

Which EAP method uses mutual certificate-based authentication between the client and the RADIUS server?

Answer: EAP-TLS

EAP-TLS requires both the client and server to present digital certificates, providing strong mutual authentication.

A wireless technician notices that a rogue access point is broadcasting the same SSID as the corporate network. What type of attack is this?

Answer: Evil twin

An evil twin attack uses a fraudulent AP with the same SSID to trick clients into associating with the attacker's device.

Which WPS attack method allows an attacker to recover the WPS PIN through repeated authentication attempts exploiting a design flaw?

Answer: Pixie Dust / online PIN brute force

WPS PIN brute-force exploits the fact that the 8-digit PIN is validated in two halves, reducing the keyspace to about 11,000 combinations.

What does 802.1X provide in a wireless network deployment?

Answer: Port-based Network Access Control (NAC)

802.1X provides port-based NAC, requiring clients to authenticate before being granted network access.

Which of the following BEST describes the purpose of a wireless IDS (WIDS)?

Answer: Detect rogue APs and unauthorized wireless activity

A WIDS monitors the RF environment to identify rogue APs, unauthorized clients, and wireless attack patterns.

Management Frame Protection (MFP/802.11w) is designed to defend against which type of attack?

Answer: De-authentication/disassociation flooding

802.11w protects management frames (including de-auth and disassoc frames) with cryptographic integrity to prevent spoofed disconnects.

A network admin wants to ensure that only specific devices can connect to the wireless network based on hardware addresses. Which control is being used?

Answer: MAC address filtering

MAC address filtering allows or denies wireless association based on a device's hardware (MAC) address.