Wireless Security & Authentication Flashcards

Which encryption protocol replaced WEP as the mandatory security standard in Wi-Fi Protected Access (WPA)?

Answer: TKIP

WPA used TKIP (Temporal Key Integrity Protocol) as a stopgap replacement for WEP, running on existing hardware while providing stronger per-packet keying.

What encryption algorithm is mandated by WPA2 (802.11i) as its required cipher suite?

Answer: AES-CCMP

WPA2 mandates AES-CCMP (Advanced Encryption Standard with Counter Mode and CBC-MAC Protocol) for robust data confidentiality and integrity.

In WPA2-Enterprise, which protocol framework is used to transport EAP messages between the supplicant and the authentication server?

Answer: 802.1X

802.1X provides the port-based network access control framework that encapsulates EAP messages between the supplicant, authenticator, and authentication server.

What is a 'deauthentication attack' in a wireless network?

Answer: Sending spoofed 802.11 deauthentication frames to disconnect clients

A deauthentication attack exploits the unprotected nature of 802.11 management frames to forcibly disconnect clients by sending spoofed deauth frames.

What is the primary function of the RADIUS server in WPA2-Enterprise authentication?

Answer: Authenticate user credentials and return an accept or reject decision

The RADIUS server acts as the Authentication, Authorization, and Accounting (AAA) server, verifying credentials and returning an Access-Accept or Access-Reject.

Which WPA3 feature provides forward secrecy, protecting past session traffic even if the passphrase is later compromised?

Answer: SAE (Simultaneous Authentication of Equals)

WPA3-Personal uses SAE, which generates unique session keys per connection, ensuring past sessions remain protected if the password is later revealed.