CWNA Wireless Security & Authentication

Question 1

Which encryption protocol replaced WEP as the mandatory security standard in Wi-Fi Protected Access (WPA)?

Accepted Answer

TKIP

Answer

AES-CCMP

Answer

3DES

Answer

RC4

Question 2

What encryption algorithm is mandated by WPA2 (802.11i) as its required cipher suite?

Accepted Answer

AES-CCMP

Answer

TKIP

Answer

RC4

Answer

DES

Question 3

In WPA2-Enterprise, which protocol framework is used to transport EAP messages between the supplicant and the authentication server?

Accepted Answer

802.1X

Answer

RADIUS over HTTPS

Answer

LDAP

Answer

TACACS+

Question 4

What is a 'deauthentication attack' in a wireless network?

Accepted Answer

Sending spoofed 802.11 deauthentication frames to disconnect clients

Answer

Brute-forcing the WPA2 passphrase offline

Answer

Jamming the RF channel with noise

Answer

Intercepting the DHCP handshake to steal an IP address

Question 5

What is the primary function of the RADIUS server in WPA2-Enterprise authentication?

Accepted Answer

Authenticate user credentials and return an accept or reject decision

Answer

Assign IP addresses to wireless clients

Answer

Generate preshared keys for each client

Answer

Broadcast SSID beacons to clients

Question 6

Which WPA3 feature provides forward secrecy, protecting past session traffic even if the passphrase is later compromised?

Accepted Answer

SAE (Simultaneous Authentication of Equals)

Answer

TKIP

Answer

Pre-Shared Key (PSK)

Answer

WEP-256