CWNA Wireless Security & Authentication

Question 1

Which encryption protocol replaced WEP as the mandatory security standard in Wi-Fi Protected Access (WPA)?

Accepted Answer

TKIP

Answer

WPA used TKIP (Temporal Key Integrity Protocol) as a stopgap replacement for WEP, running on existing hardware while providing stronger per-packet keying.

Question 2

What encryption algorithm is mandated by WPA2 (802.11i) as its required cipher suite?

Accepted Answer

AES-CCMP

Answer

WPA2 mandates AES-CCMP (Advanced Encryption Standard with Counter Mode and CBC-MAC Protocol) for robust data confidentiality and integrity.

Question 3

In WPA2-Enterprise, which protocol framework is used to transport EAP messages between the supplicant and the authentication server?

Accepted Answer

802.1X

Answer

802.1X provides the port-based network access control framework that encapsulates EAP messages between the supplicant, authenticator, and authentication server.

Question 4

What is a 'deauthentication attack' in a wireless network?

Accepted Answer

Sending spoofed 802.11 deauthentication frames to disconnect clients

Answer

A deauthentication attack exploits the unprotected nature of 802.11 management frames to forcibly disconnect clients by sending spoofed deauth frames.

Question 5

What is the primary function of the RADIUS server in WPA2-Enterprise authentication?

Accepted Answer

Authenticate user credentials and return an accept or reject decision

Answer

The RADIUS server acts as the Authentication, Authorization, and Accounting (AAA) server, verifying credentials and returning an Access-Accept or Access-Reject.

CWNA - Wireless Network Administrator Practice Test

CWNA - Wireless Network Administrator Practice Test

CWNA Wireless Security & Authentication