eJPT Wireless Network Security 1 — Questions and Answers
Question 1: Which wireless encryption protocol is considered completely broken due to its weak IV implementation and can be cracked within minutes?
- WPA2
- WEP (Correct answer)
- WPA3
- TKIP
Correct answer: WEP
WEP (Wired Equivalent Privacy) uses RC4 with 24-bit IVs that repeat frequently, allowing statistical attacks to recover the key in minutes.
Question 2: What type of wireless attack creates a fake access point with the same SSID as a legitimate network to intercept client traffic?
- Deauthentication attack
- Replay attack
- Evil Twin attack (Correct answer)
- Beacon flood
Correct answer: Evil Twin attack
An Evil Twin attack sets up a rogue AP mimicking a legitimate SSID to lure clients into connecting through the attacker.
Question 3: Which 802.11 management frame type is commonly spoofed to forcibly disconnect wireless clients from an access point?
- Probe request frame
- Association request frame
- Deauthentication frame (Correct answer)
- Beacon frame
Correct answer: Deauthentication frame
Deauthentication frames are unauthenticated 802.11 management frames, making them trivially spoofable to kick clients off a network.
Question 4: Which wireless security protocol introduced mandatory AES-CCMP encryption and replaced the original WPA standard?
- WEP
- WPA2 (Correct answer)
- WPA3
- TKIP
Correct answer: WPA2
WPA2 (IEEE 802.11i) mandated AES-CCMP encryption, replacing the weaker TKIP used in WPA and significantly improving security.
Question 5: What is the primary purpose of the WPA2 4-way handshake?
- To broadcast the network SSID to nearby clients
- To assign an IP address to the connecting client via DHCP
- To verify the PSK and derive per-session encryption keys between client and AP (Correct answer)
- To negotiate the wireless channel and frequency band
Correct answer: To verify the PSK and derive per-session encryption keys between client and AP
The 4-way handshake confirms both parties know the Pre-Shared Key and derives the Pairwise Transient Key (PTK) used to encrypt session traffic.
Question 6: What term describes the reconnaissance technique of driving around with a wireless-enabled device to discover and map nearby Wi-Fi networks?
- Network mapping
- War driving (Correct answer)
- Packet sniffing
- Footprinting
Correct answer: War driving
War driving involves traveling with a wireless adapter and software to passively discover, log, and map wireless networks in an area.
Question 7: Which frequency band does the 802.11a wireless standard exclusively operate on?
- 2.4 GHz
- 5 GHz (Correct answer)
- 900 MHz
- 60 GHz
Correct answer: 5 GHz
802.11a operates only in the 5 GHz band, offering more non-overlapping channels and less interference than the crowded 2.4 GHz band.
Which wireless encryption protocol is considered completely broken due to its weak IV implementation and can be cracked within minutes?