Ethical Hacking Wireless Security

Question 1

Which wireless security protocol is considered obsolete and easily crackable due to weak RC4 encryption?

Accepted Answer

WEP

Answer

WEP (Wired Equivalent Privacy) uses weak RC4 encryption with static keys and flawed IV reuse, making it crackable in minutes using tools like Aircrack-ng.

Question 2

What tool is used by ethical hackers to capture WPA2 handshakes for offline cracking?

Accepted Answer

Aircrack-ng suite (airodump-ng)

Answer

Airodump-ng (part of the Aircrack-ng suite) captures 802.11 wireless packets and records WPA2 four-way handshakes that can then be cracked offline with a wordlist.

Question 3

What is a 'deauthentication attack' in wireless hacking?

Accepted Answer

Sending forged 802.11 deauthentication frames to force clients to disconnect and reauthenticate

Answer

A deauthentication attack sends spoofed 802.11 deauth frames to force wireless clients offline, triggering reconnection attempts that can be captured as handshakes for cracking.

Question 4

What is an 'evil twin' wireless attack?

Accepted Answer

Creating a rogue AP with the same SSID as a legitimate network to intercept client traffic

Answer

An evil twin attack creates a rogue access point with the same SSID and stronger signal as a legitimate AP, causing clients to connect to the attacker's AP and exposing their traffic.

Question 5

What vulnerability in WPS (Wi-Fi Protected Setup) allows its PIN to be cracked much faster than expected?

Accepted Answer

The 8-digit PIN is validated in two halves of 4 digits each, reducing possible combinations to ~11,000

Answer

WPS validates the 8-digit PIN in two separate 4-digit halves, reducing the brute-force search space from 100 million to only ~11,000 attempts, enabling attacks with tools like Reaver.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Wireless Security