eJPT Wireless Network Security 2

Question 1

Which tool in the aircrack-ng suite is used to place a wireless network adapter into monitor mode?

Accepted Answer

airmon-ng

Answer

airmon-ng enables or disables monitor mode on wireless interfaces, creating a virtual monitor interface (e.g., wlan0mon) required for packet capture.

Question 2

Which aireplay-ng attack mode number sends deauthentication packets to disconnect wireless clients?

Accepted Answer

Mode 0

Answer

aireplay-ng -0 (deauthentication attack, mode 0) sends spoofed deauth frames to force clients off the network so their reconnection handshake can be captured.

Question 3

What does PMKID stand for in the context of WPA2 wireless attacks?

Accepted Answer

Pairwise Master Key Identifier

Answer

PMKID (Pairwise Master Key Identifier) is a value derived from the PMK, AP MAC, and client MAC, allowing WPA2 cracking without a full client handshake.

Question 4

What is the primary advantage of a PMKID attack over a traditional WPA2 4-way handshake capture attack?

Accepted Answer

It can crack the password without waiting for any client to connect

Answer

The PMKID attack retrieves a hash directly from the AP's first EAPOL frame, eliminating the need to wait for a legitimate client to connect and complete a handshake.

Question 5

What is a 'hidden SSID' and how is it most reliably uncovered during a wireless penetration test?

Accepted Answer

An SSID omitted from beacon frames; uncovered by capturing probe responses when clients reconnect

Answer

Hidden SSIDs suppress the network name in beacon frames, but the SSID is revealed in probe request/response frames when clients attempt to reconnect.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Wireless Network Security 2