CWS CWS WLAN Security Concepts 2

Question 1

Which attack exploits the 802.11 four-way handshake by capturing it and then running offline dictionary attacks?

Accepted Answer

WPA2-PSK brute force via captured handshake

Answer

An attacker can capture the WPA2-PSK four-way handshake and perform offline dictionary or brute-force attacks without staying connected to the network.

Question 2

What is the primary purpose of 802.11w (Management Frame Protection)?

Accepted Answer

Protecting management frames from spoofing and replay attacks

Answer

802.11w adds cryptographic protection to unicast and some multicast management frames to prevent deauthentication and disassociation spoofing.

Question 3

In WPA3-Enterprise, what minimum encryption suite is required compared to WPA2-Enterprise?

Accepted Answer

GCMP-128 as the minimum cipher

Answer

WPA3-Enterprise requires a minimum of GCMP-128, and the 192-bit mode mandates GCMP-256 for stronger government/enterprise security.

Question 4

A rogue AP is detected broadcasting the same SSID as the corporate network. What type of attack does this describe?

Accepted Answer

Evil twin attack

Answer

An evil twin attack involves deploying a rogue AP with the same SSID (and often BSSID spoofed) to lure clients into connecting to the attacker's AP.

Question 5

Which EAP method uses a server-side certificate and a client-side certificate for mutual authentication?

Accepted Answer

EAP-TLS

Answer

EAP-TLS requires both the RADIUS server and the client to present valid X.509 certificates, providing strong mutual authentication.

CWS Exam Practice Test

CWS Exam Practice Test

CWS CWS WLAN Security Concepts 2