eJPT Wireless Network Security 3

Question 1

Which tool from the aircrack-ng suite performs the final dictionary or brute-force attack against a captured WPA2 handshake file?

Accepted Answer

aircrack-ng

Answer

Wireshark

Answer

airodump-ng

Answer

aireplay-ng

Question 2

What command tests whether a wireless adapter supports packet injection, which is required for most wireless attacks?

Accepted Answer

aireplay-ng --test wlan0mon

Answer

iwconfig wlan0 check

Answer

airmon-ng check

Answer

iwlist wlan0 scan

Question 3

What is the Karma attack in the context of wireless penetration testing?

Accepted Answer

A rogue AP that responds to any probe request, impersonating previously seen networks to lure clients

Answer

An attack that jams all wireless signals in range

Answer

An attack that replays captured authentication frames

Answer

A brute-force attack against the WPS PIN

Question 4

Which Kali Linux tool provides an all-in-one framework for rogue AP creation, wireless MITM attacks, and traffic interception?

Accepted Answer

Bettercap

Answer

Wireshark

Answer

Nessus

Answer

Burp Suite

Question 5

Which security feature introduced in WPA3 provides resistance to offline dictionary attacks and ensures forward secrecy?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

AES-GCMP-256 encryption only

Answer

TKIP with longer keys

Answer

WPS 2.0 push-button configuration

Question 6

When aircrack-ng fails to crack a captured WPA2 handshake with a standard wordlist, what is the most effective next step?

Accepted Answer

Use hashcat with rule-based mangling against the converted hash file

Answer

Report the network as secure and move on

Answer

Switch to attacking WEP networks instead

Answer

Use Nmap to scan the wireless network for vulnerabilities

Question 7

What file extension does airodump-ng use when saving captured wireless packets with the -w (write) flag?

Accepted Answer

.cap

Answer

.pcap

Answer

.txt

Answer

.log