Security Protocols & Network Optimization Flashcards
7 cards from real CWT practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Security Protocols & Network Optimization flashcards as text
Which Wi-Fi security vulnerability involves an attacker creating a duplicate SSID and stronger signal to lure clients away from the legitimate AP?
Answer: Evil Twin attack
An Evil Twin AP mimics a legitimate SSID to perform a man-in-the-middle attack, intercepting client traffic.
What does the Temporal Key Integrity Protocol (TKIP) use to improve upon WEP's weaknesses?
Answer: Per-packet key mixing and a message integrity check (Michael MIC)
TKIP added per-packet key mixing, a sequence counter, and the Michael MIC to address WEP's static key and integrity vulnerabilities.
A wireless network uses 802.11ac Wave 2. A technician wants to maximize throughput by serving multiple clients simultaneously on the same channel. Which technology enables this?
Answer: MU-MIMO (Multi-User MIMO)
MU-MIMO introduced in 802.11ac Wave 2 allows an AP to transmit to multiple clients simultaneously using spatial stream separation.
Which metric is used in 802.11k Neighbor Reports to help a client select the best AP to roam to?
Answer: RCPI (Received Channel Power Indicator) and RSNI (Received Signal to Noise Indicator)
802.11k Neighbor Reports include RCPI and RSNI values so clients can intelligently rank candidate APs before roaming.
An organization mandates certificate-based mutual authentication for all wireless clients. Which EAP method best satisfies this requirement?
Answer: EAP-TLS
EAP-TLS requires both the client and server to present X.509 certificates, providing the strongest mutual authentication.
What does the AIFSN (Arbitration Interframe Space Number) control in 802.11e WMM?
Answer: The minimum wait time before a station can access the channel after it becomes idle
AIFSN sets the number of slot times a station must wait after the channel is idle before initiating transmission, with lower values giving higher priority.
A technician needs to segment IoT devices from corporate clients on the same physical WLAN infrastructure. Which mechanism achieves this logical separation?
Answer: Multiple SSIDs mapped to separate VLANs
Multiple SSIDs each mapped to a distinct VLAN allow different device groups to share the same AP hardware while remaining logically isolated.