eJPT Wireless Network Security 3

Question 1

Which tool from the aircrack-ng suite performs the final dictionary or brute-force attack against a captured WPA2 handshake file?

Accepted Answer

aircrack-ng

Answer

aircrack-ng reads captured .cap files and performs offline dictionary or brute-force attacks against the WPA2 PBKDF2-HMAC-SHA1 hash.

Question 2

What command tests whether a wireless adapter supports packet injection, which is required for most wireless attacks?

Accepted Answer

aireplay-ng --test wlan0mon

Answer

aireplay-ng --test (or -9) sends test packets to verify the adapter can inject frames, a prerequisite for deauthentication and other active wireless attacks.

Question 3

What is the Karma attack in the context of wireless penetration testing?

Accepted Answer

A rogue AP that responds to any probe request, impersonating previously seen networks to lure clients

Answer

The Karma attack exploits clients that auto-connect to known SSIDs by having the rogue AP respond positively to all probe requests, regardless of SSID.

Question 4

Which Kali Linux tool provides an all-in-one framework for rogue AP creation, wireless MITM attacks, and traffic interception?

Accepted Answer

Bettercap

Answer

Bettercap is a comprehensive offensive framework supporting Wi-Fi attacks (rogue AP, deauth, MITM), ARP spoofing, and HTTP/HTTPS interception.

Question 5

Which security feature introduced in WPA3 provides resistance to offline dictionary attacks and ensures forward secrecy?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

WPA3 uses SAE (also called the Dragonfly handshake) which is resistant to offline dictionary attacks and provides forward secrecy by deriving unique session keys.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Wireless Network Security 3