CWNA Wireless Security & Authentication 2

Question 1

What type of attack involves an attacker setting up a rogue AP with the same SSID as a legitimate network to intercept traffic?

Accepted Answer

Evil twin attack

Answer

An evil twin attack creates a rogue AP mimicking a legitimate SSID, tricking clients into associating and allowing the attacker to intercept traffic.

Question 2

Which EAP method uses TLS tunnels and does NOT require client-side digital certificates?

Accepted Answer

PEAP

Answer

PEAP (Protected EAP) creates an encrypted TLS tunnel using only a server certificate, then authenticates the client with credentials inside the tunnel.

Question 3

What is the four-way handshake in WPA2 used to derive?

Accepted Answer

The Pairwise Transient Key (PTK) for unicast encryption

Answer

The four-way handshake between the client and AP derives the PTK from the PMK, ANonce, SNonce, and MAC addresses for unicast frame encryption.

Question 4

Which 802.11 amendment introduced Management Frame Protection (MFP) to protect management frames from spoofing?

Accepted Answer

802.11w

Answer

802.11w introduced Management Frame Protection, cryptographically protecting certain management frames like deauthentication and disassociation.

Question 5

What does WIDS (Wireless Intrusion Detection System) primarily monitor for?

Accepted Answer

Rogue APs, unauthorized clients, and attack signatures like deauth floods

Answer

WIDS scans the RF environment to detect rogue APs, unauthorized associations, and patterns indicative of wireless attacks.

CWNA - Wireless Network Administrator Practice Test

CWNA - Wireless Network Administrator Practice Test

CWNA Wireless Security & Authentication 2