CWS Risk Assessment & Mitigation 2

Question 1

A company discovers its Wi-Fi network is vulnerable to a KRACK attack. Which layer of the OSI model is primarily targeted by this exploit?

Accepted Answer

Data Link layer

Answer

KRACK (Key Reinstallation Attack) targets the 4-way handshake process at the Data Link layer (Layer 2) of the OSI model, specifically the WPA2 protocol.

Question 2

During a wireless risk assessment, an analyst identifies multiple APs broadcasting SSIDs with default manufacturer names. What is the primary risk this represents?

Accepted Answer

Attackers can easily identify the hardware vendor and exploit known default credentials

Answer

Default SSIDs reveal the hardware manufacturer, allowing attackers to look up default credentials and known vulnerabilities for that specific device.

Question 3

Which mitigation technique is MOST effective against a rogue AP that is mimicking a legitimate corporate SSID?

Accepted Answer

Implementing 802.1X authentication with mutual certificate verification

Answer

802.1X with mutual certificate verification requires both the client and server to authenticate each other, preventing clients from connecting to rogue APs that cannot present a valid certificate.

Question 4

A wireless penetration tester uses a tool to capture the PMKID from a WPA2 network without requiring any client to be connected. What type of attack does this enable?

Accepted Answer

Offline dictionary/brute-force attack against the PSK

Answer

The PMKID is derived from the PMK (which is based on the PSK), allowing an attacker to perform offline brute-force or dictionary attacks against the pre-shared key without needing a connected client.

Question 5

What is the purpose of a wireless honeypot in a risk mitigation strategy?

Accepted Answer

To lure and detect attackers while gathering threat intelligence

Answer

A wireless honeypot attracts attackers to a decoy network, allowing security teams to detect intrusion attempts and gather intelligence about attack methods and attacker behavior.

(CWS) Certified Wireless Specialist Practice Test

(CWS) Certified Wireless Specialist Practice Test

CWS Risk Assessment & Mitigation 2