Practice Test Geeks(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test
← All EJPT Flashcard Decks

Wireless Network Security Flashcards

7 cards from real EJPT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Wireless Network Security flashcards as text

  1. Which tool in the aircrack-ng suite is used to place a wireless network adapter into monitor mode?

    Answer: airmon-ng

    airmon-ng enables or disables monitor mode on wireless interfaces, creating a virtual monitor interface (e.g., wlan0mon) required for packet capture.

  2. Which aireplay-ng attack mode number sends deauthentication packets to disconnect wireless clients?

    Answer: Mode 0

    aireplay-ng -0 (deauthentication attack, mode 0) sends spoofed deauth frames to force clients off the network so their reconnection handshake can be captured.

  3. What does PMKID stand for in the context of WPA2 wireless attacks?

    Answer: Pairwise Master Key Identifier

    PMKID (Pairwise Master Key Identifier) is a value derived from the PMK, AP MAC, and client MAC, allowing WPA2 cracking without a full client handshake.

  4. What is the primary advantage of a PMKID attack over a traditional WPA2 4-way handshake capture attack?

    Answer: It can crack the password without waiting for any client to connect

    The PMKID attack retrieves a hash directly from the AP's first EAPOL frame, eliminating the need to wait for a legitimate client to connect and complete a handshake.

  5. What is a 'hidden SSID' and how is it most reliably uncovered during a wireless penetration test?

    Answer: An SSID omitted from beacon frames; uncovered by capturing probe responses when clients reconnect

    Hidden SSIDs suppress the network name in beacon frames, but the SSID is revealed in probe request/response frames when clients attempt to reconnect.

  6. Which correct airodump-ng command syntax captures only traffic from a specific access point with MAC aa:bb:cc:dd:ee:ff on channel 11?

    Answer: airodump-ng -c 11 --bssid aa:bb:cc:dd:ee:ff wlan0mon

    The -c flag sets the channel and --bssid filters by AP MAC address; wlan0mon is the monitor-mode interface created by airmon-ng.

  7. During wireless reconnaissance with airodump-ng, what information can you use to determine whether a captured network uses WPA2 Personal or WPA2 Enterprise authentication?

    Answer: The AUTH column showing PSK versus MGT

    The AUTH column in airodump-ng output shows PSK for WPA2-Personal (pre-shared key) and MGT for WPA2-Enterprise (802.1X/RADIUS authentication).