CWT Security Protocols & Network Optimization 3

Question 1

What encryption algorithm does WPA3-Personal use to replace the Pre-Shared Key (PSK) handshake?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

WPA3-Personal replaces PSK with SAE (Dragonfly handshake), providing forward secrecy and resistance to offline dictionary attacks.

Question 2

Which EAP method uses server-side certificates only, with client credentials tunneled inside a TLS session?

Accepted Answer

PEAP

Answer

PEAP establishes a TLS tunnel using only a server certificate, then authenticates the client via MSCHAPv2 or another inner method inside the tunnel.

Question 3

A wireless survey shows high co-channel interference on channel 6. Which optimization technique directly addresses this?

Accepted Answer

Reducing transmit power on overlapping APs

Answer

Lowering transmit power reduces the RF footprint of each AP, shrinking the co-channel interference zone.

Question 4

Which 802.11 feature allows a client to roam between APs without re-running a full 802.1X authentication?

Accepted Answer

802.11r (Fast BSS Transition)

Answer

802.11r pre-negotiates key material between APs, enabling a client to reassociate with a new AP in as few as two frames.

Question 5

A deauthentication flood attack is possible against WPA2 networks because management frames are unprotected. Which amendment addresses this vulnerability?

Accepted Answer

802.11w

Answer

802.11w (Protected Management Frames) cryptographically protects action, disassociation, and deauthentication frames.

(CWT) Certified Wireless Technician Practice Test

(CWT) Certified Wireless Technician Practice Test

CWT Security Protocols & Network Optimization 3