CWS CWS WLAN Security Concepts 4

Question 1

In WPA2-Enterprise, what cryptographic protocol protects the data frame payload over the air?

Accepted Answer

CCMP based on AES in counter mode with CBC-MAC

Answer

WPA2-Enterprise mandates CCMP (Counter Mode CBC-MAC Protocol) using AES-128 to provide both confidentiality and data integrity for wireless frames.

Question 2

A security analyst finds clients connecting to an AP with a stronger signal but no certificate validation prompt. What attack is most likely occurring?

Accepted Answer

Evil twin AP with no server cert validation by clients

Answer

An evil twin AP can impersonate the legitimate AP and, if clients do not validate server certificates, successfully intercept EAP credentials or traffic.

Question 3

What is the role of the Pairwise Master Key (PMK) in WPA2 authentication?

Accepted Answer

It serves as the seed from which the PTK is derived via the four-way handshake

Answer

The PMK is derived from the PSK or EAP authentication and is used during the four-way handshake to derive the Pairwise Transient Key (PTK) used for encrypting data.

Question 4

Which WLAN attack specifically targets the WPS PIN feature?

Accepted Answer

Pixie Dust attack

Answer

The Pixie Dust attack exploits weak nonce generation in certain WPS implementations to recover the WPS PIN and subsequently the WPA2 passphrase offline.

Question 5

In a CWS context, what does the term 'RF jamming' describe as a wireless threat?

Accepted Answer

Deliberate interference on the wireless spectrum to cause a denial of service

Answer

RF jamming is a physical-layer DoS attack where a device transmits interference signals on the same frequency band, disrupting legitimate wireless communications.

CWS Exam Practice Test

CWS Exam Practice Test

CWS CWS WLAN Security Concepts 4