GSEC Wireless Security

Question 1

Which wireless security protocol uses the RC4 stream cipher and is considered cryptographically broken?

Accepted Answer

WEP

Answer

WPA2

Answer

WPA3

Answer

802.1X

Question 2

What attack captures the WPA2 4-way handshake to perform an offline dictionary attack against the PSK?

Accepted Answer

Deauthentication and handshake capture

Answer

Evil twin attack

Answer

KRACK attack

Answer

Beacon flooding

Question 3

Which 802.11 frame type is used in a deauthentication attack to disconnect wireless clients?

Accepted Answer

Management frame

Answer

Data frame

Answer

Control frame

Answer

Beacon frame

Question 4

WPA3-Personal replaces PSK authentication with which mechanism to provide forward secrecy?

Accepted Answer

SAE (Simultaneous Authentication of Equals)

Answer

PEAP

Answer

EAP-TLS

Answer

TKIP

Question 5

What is a rogue access point?

Accepted Answer

An unauthorized AP connected to the corporate network

Answer

An AP configured with WEP instead of WPA2

Answer

An AP broadcasting a hidden SSID

Answer

An AP that blocks DHCP requests

Question 6

Which wireless attack creates a copy of a legitimate SSID to trick users into connecting to an attacker-controlled network?

Accepted Answer

Evil twin (honeypot AP)

Answer

Wardriving

Answer

Bluejacking

Answer

IV collision attack

Question 7

802.1X port-based network access control for wireless networks relies on which protocol framework for authentication?

Accepted Answer

RADIUS with EAP

Answer

LDAP with SAML

Answer

Kerberos with PAP

Answer

TACACS+ with CHAP