CWT Security Protocols & Network Optimization 4 — Questions and Answers
Question 1: Which Wi-Fi security vulnerability involves an attacker creating a duplicate SSID and stronger signal to lure clients away from the legitimate AP?
- Evil Twin attack (Correct answer)
- Disassociation attack
- Beacon flood
- KRACK attack
Correct answer: Evil Twin attack
An Evil Twin AP mimics a legitimate SSID to perform a man-in-the-middle attack, intercepting client traffic.
Question 2: What does the Temporal Key Integrity Protocol (TKIP) use to improve upon WEP's weaknesses?
- Per-packet key mixing and a message integrity check (Michael MIC) (Correct answer)
- AES-CCMP with 128-bit keys
- SAE Dragonfly handshake
- GCMP-256 encryption
Correct answer: Per-packet key mixing and a message integrity check (Michael MIC)
TKIP added per-packet key mixing, a sequence counter, and the Michael MIC to address WEP's static key and integrity vulnerabilities.
Question 3: A wireless network uses 802.11ac Wave 2. A technician wants to maximize throughput by serving multiple clients simultaneously on the same channel. Which technology enables this?
- MU-MIMO (Multi-User MIMO) (Correct answer)
- OFDMA
- Beamforming
- TWT (Target Wake Time)
Correct answer: MU-MIMO (Multi-User MIMO)
MU-MIMO introduced in 802.11ac Wave 2 allows an AP to transmit to multiple clients simultaneously using spatial stream separation.
Question 4: Which metric is used in 802.11k Neighbor Reports to help a client select the best AP to roam to?
- RCPI (Received Channel Power Indicator) and RSNI (Received Signal to Noise Indicator) (Correct answer)
- DTIM period
- Beacon interval
- TSF (Timing Synchronization Function) value
Correct answer: RCPI (Received Channel Power Indicator) and RSNI (Received Signal to Noise Indicator)
802.11k Neighbor Reports include RCPI and RSNI values so clients can intelligently rank candidate APs before roaming.
Question 5: An organization mandates certificate-based mutual authentication for all wireless clients. Which EAP method best satisfies this requirement?
- EAP-TLS (Correct answer)
- PEAP-MSCHAPv2
- EAP-FAST
- LEAP
Correct answer: EAP-TLS
EAP-TLS requires both the client and server to present X.509 certificates, providing the strongest mutual authentication.
Question 6: What does the AIFSN (Arbitration Interframe Space Number) control in 802.11e WMM?
- The minimum wait time before a station can access the channel after it becomes idle (Correct answer)
- The maximum size of a transmitted data frame
- The interval between consecutive beacon transmissions
- The number of spatial streams used for transmission
Correct answer: The minimum wait time before a station can access the channel after it becomes idle
AIFSN sets the number of slot times a station must wait after the channel is idle before initiating transmission, with lower values giving higher priority.
Question 7: A technician needs to segment IoT devices from corporate clients on the same physical WLAN infrastructure. Which mechanism achieves this logical separation?
- Multiple SSIDs mapped to separate VLANs (Correct answer)
- Separate RADIUS server instances
- DFS channel assignment
- Disabling SSID broadcasting for the IoT network
Correct answer: Multiple SSIDs mapped to separate VLANs
Multiple SSIDs each mapped to a distinct VLAN allow different device groups to share the same AP hardware while remaining logically isolated.
CWT Security Protocols & Network Optimization 4
Which Wi-Fi security vulnerability involves an attacker creating a duplicate SSID and stronger signal to lure clients away from the legitimate AP?