GSEC Wireless Security

Question 1

Which wireless security protocol uses the RC4 stream cipher and is considered cryptographically broken?

Accepted Answer

WEP

Answer

WEP (Wired Equivalent Privacy) uses RC4 with static keys and weak IV reuse, making it trivially breakable.

Question 2

What attack captures the WPA2 4-way handshake to perform an offline dictionary attack against the PSK?

Accepted Answer

Deauthentication and handshake capture

Answer

An attacker sends deauthentication frames to force a client to reconnect, capturing the 4-way handshake for offline cracking.

Question 3

Which 802.11 frame type is used in a deauthentication attack to disconnect wireless clients?

Accepted Answer

Management frame

Answer

Deauthentication frames are management frames; in legacy WPA2 they are unauthenticated and can be forged by attackers.

Question 4

WPA3-Personal replaces PSK authentication with which mechanism to provide forward secrecy?

Accepted Answer

SAE (Simultaneous Authentication of Equals)

Answer

SAE (also called Dragonfly) is a password-authenticated key exchange that provides forward secrecy and resists offline dictionary attacks.

Question 5

What is a rogue access point?

Accepted Answer

An unauthorized AP connected to the corporate network

Answer

A rogue AP is an unauthorized access point plugged into the corporate network, potentially bypassing perimeter controls.

(GSEC) GIAC Security Essentials Cert Prep Practice Test