Wireless Security & Authentication Flashcards
6 cards from real CWNA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Wireless Security & Authentication flashcards as text
What type of attack involves an attacker setting up a rogue AP with the same SSID as a legitimate network to intercept traffic?
Answer: Evil twin attack
An evil twin attack creates a rogue AP mimicking a legitimate SSID, tricking clients into associating and allowing the attacker to intercept traffic.
Which EAP method uses TLS tunnels and does NOT require client-side digital certificates?
Answer: PEAP
PEAP (Protected EAP) creates an encrypted TLS tunnel using only a server certificate, then authenticates the client with credentials inside the tunnel.
What is the four-way handshake in WPA2 used to derive?
Answer: The Pairwise Transient Key (PTK) for unicast encryption
The four-way handshake between the client and AP derives the PTK from the PMK, ANonce, SNonce, and MAC addresses for unicast frame encryption.
Which 802.11 amendment introduced Management Frame Protection (MFP) to protect management frames from spoofing?
Answer: 802.11w
802.11w introduced Management Frame Protection, cryptographically protecting certain management frames like deauthentication and disassociation.
What does WIDS (Wireless Intrusion Detection System) primarily monitor for?
Answer: Rogue APs, unauthorized clients, and attack signatures like deauth floods
WIDS scans the RF environment to detect rogue APs, unauthorized associations, and patterns indicative of wireless attacks.
Which security protocol is considered completely broken and should never be used in a modern wireless deployment?
Answer: WEP
WEP uses RC4 with static keys and weak IVs, making it trivially crackable in minutes; it is completely deprecated and must not be used.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- cwnp.com — Test delivery, eligibility, exam format, passing score, renewal, test dates, time limit, score validity, retake policy, score release · verified Oct 2026