← All CWNA Flashcard Decks

Wireless Security & Authentication Flashcards

6 cards from real CWNA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Wireless Security & Authentication flashcards as text
  1. What type of attack involves an attacker setting up a rogue AP with the same SSID as a legitimate network to intercept traffic?

    Answer: Evil twin attack

    An evil twin attack creates a rogue AP mimicking a legitimate SSID, tricking clients into associating and allowing the attacker to intercept traffic.

  2. Which EAP method uses TLS tunnels and does NOT require client-side digital certificates?

    Answer: PEAP

    PEAP (Protected EAP) creates an encrypted TLS tunnel using only a server certificate, then authenticates the client with credentials inside the tunnel.

  3. What is the four-way handshake in WPA2 used to derive?

    Answer: The Pairwise Transient Key (PTK) for unicast encryption

    The four-way handshake between the client and AP derives the PTK from the PMK, ANonce, SNonce, and MAC addresses for unicast frame encryption.

  4. Which 802.11 amendment introduced Management Frame Protection (MFP) to protect management frames from spoofing?

    Answer: 802.11w

    802.11w introduced Management Frame Protection, cryptographically protecting certain management frames like deauthentication and disassociation.

  5. What does WIDS (Wireless Intrusion Detection System) primarily monitor for?

    Answer: Rogue APs, unauthorized clients, and attack signatures like deauth floods

    WIDS scans the RF environment to detect rogue APs, unauthorized associations, and patterns indicative of wireless attacks.

  6. Which security protocol is considered completely broken and should never be used in a modern wireless deployment?

    Answer: WEP

    WEP uses RC4 with static keys and weak IVs, making it trivially crackable in minutes; it is completely deprecated and must not be used.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. cwnp.com — Test delivery, eligibility, exam format, passing score, renewal, test dates, time limit, score validity, retake policy, score release · verified Oct 2026