GSEC Wireless Security 3

Question 1

Which Bluetooth attack silently copies data (contacts, messages) from a device without the owner's knowledge or pairing consent?

Accepted Answer

Bluesnarfing

Answer

Bluesnarfing exploits vulnerabilities to covertly access and extract data from a Bluetooth device without authorization.

Question 2

What is the primary purpose of Wi-Fi Protected Setup (WPS) and why is it considered a security risk?

Accepted Answer

It simplifies device enrollment via PIN; the 8-digit PIN is vulnerable to brute-force in about 11,000 attempts

Answer

The WPS PIN is split into two halves validated independently, reducing the keyspace to ~11,000 combinations and enabling rapid brute-force (Reaver attack).

Question 3

Which wireless band characteristic makes 5 GHz generally preferable for security-sensitive communications compared to 2.4 GHz?

Accepted Answer

5 GHz has shorter range, reducing signal leakage outside the facility

Answer

The shorter propagation range of 5 GHz reduces the physical area over which signals can be intercepted, limiting exposure outside controlled premises.

Question 4

What does enabling MAC address filtering on a wireless access point actually accomplish from a security perspective?

Accepted Answer

It provides weak deterrence only; MAC addresses can be spoofed by an attacker

Answer

MAC addresses are transmitted in cleartext and can be observed and spoofed, making MAC filtering an easily bypassed control.

Question 5

A wireless client in an airport connects to a free Wi-Fi network. Which attack is most likely if the AP is attacker-controlled?

Accepted Answer

Man-in-the-middle (evil twin) interception

Answer

An evil twin AP in a public location allows the attacker to proxy all traffic, performing a man-in-the-middle attack on unsuspecting clients.

(GSEC) GIAC Security Essentials Cert Prep Practice Test

(GSEC) GIAC Security Essentials Cert Prep Practice Test

GSEC Wireless Security 3