CWT Security Protocols & Network Optimization 5 — Questions and Answers
Question 1: What is the primary security risk associated with using open (unauthenticated) Wi-Fi networks?
- Eavesdropping due to unencrypted over-the-air transmissions (Correct answer)
- IP address exhaustion from DHCP abuse
- Rogue DHCP server injection
- Channel saturation from beacon floods
Correct answer: Eavesdropping due to unencrypted over-the-air transmissions
Open networks transmit data without encryption, allowing any nearby device in promiscuous mode to capture and read the traffic.
Question 2: Which 802.11ax (Wi-Fi 6) feature reduces power consumption for IoT devices by scheduling when they wake to receive data?
- TWT (Target Wake Time) (Correct answer)
- OFDMA
- BSS Coloring
- MU-MIMO
Correct answer: TWT (Target Wake Time)
TWT allows an AP and client to negotiate specific times for the client to wake and exchange data, significantly extending battery life.
Question 3: BSS Coloring in 802.11ax is designed to improve which aspect of WLAN performance?
- Spatial reuse by allowing concurrent transmissions in overlapping BSSs (Correct answer)
- Encryption key rotation frequency
- Beamforming antenna gain
- Roaming speed between APs
Correct answer: Spatial reuse by allowing concurrent transmissions in overlapping BSSs
BSS Coloring tags frames with a color identifier so stations can differentiate overlapping BSS transmissions and defer only when necessary, improving spatial reuse.
Question 4: A wireless technician discovers that a client is sending 802.11 probe requests with randomized MAC addresses. What is the security purpose of this client behavior?
- To prevent tracking of the device's physical location across Wi-Fi networks (Correct answer)
- To bypass MAC address filtering on corporate APs
- To test multiple SSIDs simultaneously
- To initiate a de-authentication against the connected AP
Correct answer: To prevent tracking of the device's physical location across Wi-Fi networks
MAC address randomization during scanning prevents third parties from correlating probe requests to a specific device over time.
Question 5: In a high-density WLAN deployment such as a stadium, which channel width is recommended for 5 GHz to maximize the number of available non-overlapping channels?
- 20 MHz (Correct answer)
- 40 MHz
- 80 MHz
- 160 MHz
Correct answer: 20 MHz
20 MHz channels maximize the number of non-overlapping channels available in the 5 GHz band, reducing co-channel interference in dense environments.
Question 6: Which protocol does WPA3-Enterprise mandate for protecting management frames to comply with its enhanced security requirements?
- 802.11w (Protected Management Frames) (Correct answer)
- 802.11r (Fast BSS Transition)
- 802.11k (Neighbor Reports)
- 802.11v (BSS Transition Management)
Correct answer: 802.11w (Protected Management Frames)
WPA3-Enterprise mandates 802.11w PMF to protect deauthentication and disassociation frames from spoofing attacks.
Question 7: A WLAN controller shows a 'hidden node' problem between two clients. Which 802.11 mechanism is designed to mitigate this issue?
- RTS/CTS (Request to Send / Clear to Send) (Correct answer)
- DTIM (Delivery Traffic Indication Map)
- ACK timeout adjustment
- APSD (Automatic Power Save Delivery)
Correct answer: RTS/CTS (Request to Send / Clear to Send)
RTS/CTS reserves the wireless medium before transmitting, alerting hidden nodes that cannot hear each other to defer their transmissions.
CWT Security Protocols & Network Optimization 5
What is the primary security risk associated with using open (unauthenticated) Wi-Fi networks?