GSEC Wireless Security 3

Question 1

Which Bluetooth attack silently copies data (contacts, messages) from a device without the owner's knowledge or pairing consent?

Accepted Answer

Bluesnarfing

Answer

Bluejacking

Answer

Bluebugging

Answer

Bluesmacking

Question 2

What is the primary purpose of Wi-Fi Protected Setup (WPS) and why is it considered a security risk?

Accepted Answer

It simplifies device enrollment via PIN; the 8-digit PIN is vulnerable to brute-force in about 11,000 attempts

Answer

It speeds up channel selection; it is risky because it disables encryption temporarily

Answer

It automates WPA3 key rotation; it leaks the PSK in plaintext

Answer

It enables MIMO optimization; it opens an unauthenticated admin port

Question 3

Which wireless band characteristic makes 5 GHz generally preferable for security-sensitive communications compared to 2.4 GHz?

Accepted Answer

5 GHz has shorter range, reducing signal leakage outside the facility

Answer

5 GHz supports stronger encryption algorithms

Answer

5 GHz is immune to deauthentication attacks

Answer

5 GHz mandates certificate-based authentication

Question 4

What does enabling MAC address filtering on a wireless access point actually accomplish from a security perspective?

Accepted Answer

It provides weak deterrence only; MAC addresses can be spoofed by an attacker

Answer

It prevents all unauthorized users from connecting

Answer

It encrypts the association request

Answer

It enforces certificate-based authentication

Question 5

A wireless client in an airport connects to a free Wi-Fi network. Which attack is most likely if the AP is attacker-controlled?

Accepted Answer

Man-in-the-middle (evil twin) interception

Answer

Wardriving

Answer

Bluebugging

Answer

ARP poisoning within the corporate LAN

Question 6

Which countermeasure most effectively prevents clients from accidentally connecting to an evil twin AP mimicking the corporate SSID?

Accepted Answer

Deploying WPA2/WPA3-Enterprise with mutual certificate validation (EAP-TLS)

Answer

Using a complex WPA2-Personal passphrase

Answer

Enabling MAC address filtering on the corporate AP

Answer

Hiding the corporate SSID

Question 7

Which IEEE standard formally defines the WPA2 security mechanisms including CCMP/AES for wireless networks?

Accepted Answer

IEEE 802.11i

Answer

IEEE 802.11a

Answer

IEEE 802.1Q

Answer

IEEE 802.3af