CWS CWS WLAN Security Concepts 3

Question 1

What is a PMKID attack and why is it more dangerous than a traditional handshake capture attack?

Accepted Answer

It can be performed without any connected clients by capturing a single EAPOL frame from the AP

Answer

A PMKID attack extracts the PMKID from a single EAPOL frame sent by the AP, enabling offline cracking without needing an active client connection.

Question 2

In 802.1X authentication, what is the role of the supplicant?

Accepted Answer

The client device requesting network access

Answer

The supplicant is the client device (e.g., laptop or phone) that requests access to the network and provides credentials during 802.1X authentication.

Question 3

Which countermeasure directly addresses the threat of deauthentication flood attacks?

Accepted Answer

Enabling 802.11w (Management Frame Protection)

Answer

802.11w protects unicast management frames including deauthentication and disassociation frames from being forged by an attacker.

Question 4

A wireless network uses EAP-PEAP. Which credential type does the inner authentication typically verify?

Accepted Answer

Username and password (MSCHAPv2)

Answer

PEAP typically uses MSCHAPv2 as the inner authentication method, verifying username and password inside a TLS tunnel established by the server certificate.

Question 5

What is the key difference between an ad-hoc (IBSS) network and an infrastructure (BSS) network from a security perspective?

Accepted Answer

IBSS networks lack a central AP to enforce security policies

Answer

Ad-hoc networks operate peer-to-peer without an AP, making centralized security policy enforcement impossible and increasing risk.

CWS Exam Practice Test

CWS Exam Practice Test

CWS CWS WLAN Security Concepts 3