GSEC Wireless Security 2

Question 1

The KRACK (Key Reinstallation Attack) vulnerability targeted which phase of the WPA2 protocol?

Accepted Answer

The 4-way handshake nonce reuse

Answer

KRACK exploits the ability to replay and retransmit handshake messages, causing nonce reuse that breaks encryption guarantees.

Question 2

Which tool is commonly used during wireless penetration testing to capture packets and perform WPA handshake cracking?

Accepted Answer

Aircrack-ng suite

Answer

The Aircrack-ng suite (including airodump-ng, aireplay-ng, and aircrack-ng) is the standard toolset for wireless capture and WPA PSK cracking.

Question 3

What does SSID cloaking (hiding the SSID) provide in terms of wireless security?

Accepted Answer

Minimal obscurity; it is not a real security control

Answer

Hidden SSIDs are trivially discovered with passive sniffing tools; they provide obscurity only, not meaningful security.

Question 4

Which wireless encryption protocol replaced WEP by using TKIP as a temporary stopgap while using the existing RC4 hardware?

Accepted Answer

WPA (WPA1)

Answer

WPA introduced TKIP (Temporal Key Integrity Protocol) to patch WEP's weaknesses on existing hardware before WPA2/AES was widely available.

Question 5

An attacker uses a directional antenna and laptop to map wireless networks while driving through neighborhoods. This activity is called:

Accepted Answer

Wardriving

Answer

Wardriving is the practice of driving around with wireless scanning equipment to discover and log available Wi-Fi networks.

(GSEC) GIAC Security Essentials Cert Prep Practice Test