eJPT Wireless Network Security 2

Question 1

Which tool in the aircrack-ng suite is used to place a wireless network adapter into monitor mode?

Accepted Answer

airmon-ng

Answer

airodump-ng

Answer

aireplay-ng

Answer

aircrack-ng

Question 2

Which aireplay-ng attack mode number sends deauthentication packets to disconnect wireless clients?

Accepted Answer

Mode 0

Answer

Mode 1

Answer

Mode 3

Answer

Mode 6

Question 3

What does PMKID stand for in the context of WPA2 wireless attacks?

Accepted Answer

Pairwise Master Key Identifier

Answer

Pre-Master Key Identifier

Answer

Primary MAC Key Identifier

Answer

Packet Master Key Index

Question 4

What is the primary advantage of a PMKID attack over a traditional WPA2 4-way handshake capture attack?

Accepted Answer

It can crack the password without waiting for any client to connect

Answer

It only requires physical access to the router

Answer

It only works against WPA1 networks with TKIP encryption

Answer

It requires capturing traffic from at least 10 connected clients

Question 5

What is a 'hidden SSID' and how is it most reliably uncovered during a wireless penetration test?

Accepted Answer

An SSID omitted from beacon frames; uncovered by capturing probe responses when clients reconnect

Answer

An SSID encrypted with WPA3; uncovered by brute-forcing the encryption key

Answer

An SSID only visible on the 5 GHz band; uncovered by switching to that frequency

Answer

An SSID protected by MAC filtering; uncovered by spoofing an allowed MAC address

Question 6

Which correct airodump-ng command syntax captures only traffic from a specific access point with MAC aa:bb:cc:dd:ee:ff on channel 11?

Accepted Answer

airodump-ng -c 11 --bssid aa:bb:cc:dd:ee:ff wlan0mon

Answer

airodump-ng --filter 11 --ap aa:bb:cc:dd:ee:ff wlan0

Answer

airodump-ng -channel 11 -mac aa:bb:cc:dd:ee:ff wlan0mon

Answer

airodump-ng --scan 11 --target aa:bb:cc:dd:ee:ff wlan0

Question 7

During wireless reconnaissance with airodump-ng, what information can you use to determine whether a captured network uses WPA2 Personal or WPA2 Enterprise authentication?

Accepted Answer

The AUTH column showing PSK versus MGT

Answer

The signal strength (PWR) column value

Answer

The number of data frames in the #Data column

Answer

The ENC column showing AES versus TKIP