NSE Wireless & Mobile Security 1 — Questions and Answers
Question 1: Which authentication protocol is commonly used with 802.1X for enterprise wireless networks?
- WEP (Wired Equivalent Privacy)
- EAP (Extensible Authentication Protocol) (Correct answer)
- WPS (Wi-Fi Protected Setup)
- TKIP (Temporal Key Integrity Protocol)
Correct answer: EAP (Extensible Authentication Protocol)
EAP is the standard authentication framework used with 802.1X and RADIUS servers to provide robust, flexible authentication for enterprise wireless networks.
Question 2: What is the primary purpose of a Wireless Intrusion Prevention System (WIPS)?
- To encrypt all wireless traffic using AES-256
- To assign IP addresses to wireless clients via DHCP
- To detect and prevent unauthorized access points and wireless attacks (Correct answer)
- To amplify wireless signal strength across the facility
Correct answer: To detect and prevent unauthorized access points and wireless attacks
WIPS continuously monitors the RF spectrum to detect rogue access points, unauthorized clients, and wireless attacks, and can automatically contain or block threats.
Question 3: Which WPA3 feature provides forward secrecy and replaces the PSK handshake?
- TKIP (Temporal Key Integrity Protocol)
- SAE (Simultaneous Authentication of Equals) (Correct answer)
- WPS (Wi-Fi Protected Setup)
- CCMP (Counter Mode CBC-MAC Protocol)
Correct answer: SAE (Simultaneous Authentication of Equals)
SAE replaces the WPA2 PSK handshake in WPA3, generating unique session keys per connection and providing forward secrecy so past sessions cannot be decrypted if keys are compromised.
Question 4: What type of wireless attack involves setting up a rogue access point that mimics a legitimate one to intercept traffic?
- Deauthentication flood attack
- Evil Twin attack (Correct answer)
- Jamming attack
- Wardriving
Correct answer: Evil Twin attack
An Evil Twin attack creates a malicious access point with the same SSID and similar characteristics as a legitimate AP, tricking clients into connecting so traffic can be intercepted.
Question 5: Which wireless security protocol is considered critically vulnerable and must never be used in modern networks?
- WPA3-Enterprise
- WPA2-Enterprise with EAP-TLS
- WEP (Wired Equivalent Privacy) (Correct answer)
- WPA2-Personal with AES
Correct answer: WEP (Wired Equivalent Privacy)
WEP uses weak RC4 encryption with static keys and flawed IV implementation, allowing an attacker to crack the key by capturing as few as 50,000 packets.
Question 6: In an enterprise wireless deployment, what is the primary role of a RADIUS server?
- To provide DHCP addresses to wireless clients
- To encrypt wireless traffic using AES encryption
- To authenticate wireless users and authorize network access (Correct answer)
- To manage wireless channel and power allocation
Correct answer: To authenticate wireless users and authorize network access
A RADIUS server centralizes Authentication, Authorization, and Accounting (AAA) for 802.1X wireless deployments, validating credentials and enforcing access policies.
Question 7: What does a captive portal in a wireless network primarily provide?
- Stronger AES encryption for all wireless traffic
- A web-based authentication or terms-acceptance page before granting network access (Correct answer)
- Automatic IP address and DNS assignment to wireless clients
- Real-time RF signal strength monitoring and reporting
Correct answer: A web-based authentication or terms-acceptance page before granting network access
A captive portal intercepts HTTP/HTTPS traffic and redirects unauthenticated users to a web page for credential entry or acceptance of terms before network access is granted.
NSE Wireless & Mobile Security 1
Which authentication protocol is commonly used with 802.1X for enterprise wireless networks?