CWS CWS WLAN Security Concepts 5

Question 1

Which WLAN security protocol was deprecated due to its use of RC4 and a 24-bit initialization vector?

Accepted Answer

WEP (Wired Equivalent Privacy)

Answer

WEP is critically flawed because its 24-bit IV is too short, leading to IV reuse, and RC4 is vulnerable to statistical attacks that can recover the key in minutes.

Question 2

An organization wants to allow guest Wi-Fi access without exposing internal resources. Which architecture best achieves this?

Accepted Answer

Separate guest SSID mapped to an isolated VLAN with firewall rules

Answer

A separate guest SSID on an isolated VLAN with firewall policies ensures guests have internet access without any path to internal network resources.

Question 3

What does a wireless IDS/IPS do when it detects a rogue AP on the network?

Accepted Answer

It can alert administrators and/or use over-the-air deauthentication to contain the rogue AP

Answer

A WIDS/WIPS can alert staff and, through automated containment, send spoofed deauth frames to disconnect clients from the rogue AP.

Question 4

In the context of WLAN security, what is a 'disassociation attack'?

Accepted Answer

Sending forged disassociation frames to disconnect clients from the AP

Answer

A disassociation attack sends spoofed 802.11 disassociation frames from the AP's MAC address, forcing clients to disconnect and potentially reconnect to a rogue AP.

Question 5

Which key hierarchy element is unique to each client-AP session and is used to derive the actual encryption and integrity keys?

Accepted Answer

PTK (Pairwise Transient Key)

Answer

The PTK is derived from the PMK during the four-way handshake and is unique per session; it contains the TK, MIC keys, and EAPOL keys used for the session.

CWS Exam Practice Test

CWS Exam Practice Test

CWS CWS WLAN Security Concepts 5