NSE Wireless & Mobile Security 2

Question 1

Which modern attack technique allows WPA2 PSK cracking without capturing a full 4-way handshake from a connected client?

Accepted Answer

PMKID attack

Answer

Bluejacking attack

Answer

ARP poisoning attack

Answer

DNS spoofing attack

Question 2

What is the primary security vulnerability in WPS (Wi-Fi Protected Setup) PIN authentication?

Accepted Answer

The 8-digit PIN is validated in two halves, reducing brute-force space to ~11,000 guesses

Answer

It transmits the network password in plaintext

Answer

It uses the deprecated DES encryption algorithm

Answer

It automatically disables the network firewall during pairing

Question 3

What is the primary function of MDM (Mobile Device Management) in enterprise mobile security?

Accepted Answer

To centrally manage, enforce security policies, and control enterprise mobile devices

Answer

To encrypt all cellular network traffic end-to-end

Answer

To track device GPS location and report to management

Answer

To provide automatic VPN tunneling for all mobile traffic

Question 4

Which wireless denial-of-service attack exploits unauthenticated 802.11 management frames to disconnect clients from their AP?

Accepted Answer

Deauthentication flood attack

Answer

Karma attack

Answer

Fragmentation attack

Answer

KRACK attack

Question 5

What does the KRACK (Key Reinstallation Attack) vulnerability exploit in WPA2?

Accepted Answer

Nonce reuse caused by key reinstallation during the WPA2 4-way handshake

Answer

WEP's static encryption keys and weak IVs

Answer

Bluetooth pairing protocol weaknesses

Answer

The WPS PIN brute-force vulnerability

Question 6

Which security measure is MOST effective at protecting a corporate wireless network against rogue access points?

Accepted Answer

Deploying a WIPS with continuous RF spectrum monitoring and automatic AP containment

Answer

Using WPA2-Personal with a complex passphrase

Answer

Disabling SSID broadcast on all corporate access points

Answer

Maximizing wireless transmit power to overpower rogue signals

Question 7

Which EAP method provides the strongest security for WPA2-Enterprise by requiring digital certificates on both the client and authentication server?

Accepted Answer

EAP-TLS

Answer

EAP-MD5

Answer

EAP-PEAP

Answer

EAP-TTLS