NSE Wireless & Mobile Security 2

Question 1

Which modern attack technique allows WPA2 PSK cracking without capturing a full 4-way handshake from a connected client?

Accepted Answer

PMKID attack

Answer

The PMKID attack extracts the PMKID value directly from the AP's EAPOL frame, enabling offline PSK cracking without needing a connected client or capturing the full handshake.

Question 2

What is the primary security vulnerability in WPS (Wi-Fi Protected Setup) PIN authentication?

Accepted Answer

The 8-digit PIN is validated in two halves, reducing brute-force space to ~11,000 guesses

Answer

WPS PIN authentication validates the PIN in two independent halves (4+4 digits), reducing the effective keyspace from 10^8 to ~11,000 combinations, making brute-force attacks trivial.

Question 3

What is the primary function of MDM (Mobile Device Management) in enterprise mobile security?

Accepted Answer

To centrally manage, enforce security policies, and control enterprise mobile devices

Answer

MDM allows organizations to remotely manage mobile devices, enforce password and encryption policies, push or restrict applications, and perform remote wipe if devices are lost or stolen.

Question 4

Which wireless denial-of-service attack exploits unauthenticated 802.11 management frames to disconnect clients from their AP?

Accepted Answer

Deauthentication flood attack

Answer

A deauthentication flood attack sends spoofed, unauthenticated 802.11 deauth frames to clients or APs, continuously disconnecting users since management frames lack authentication in WPA2.

Question 5

What does the KRACK (Key Reinstallation Attack) vulnerability exploit in WPA2?

Accepted Answer

Nonce reuse caused by key reinstallation during the WPA2 4-way handshake

Answer

KRACK forces nonce reuse by manipulating and replaying cryptographic handshake messages, allowing attackers to decrypt encrypted packets in WPA2-protected networks.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Wireless & Mobile Security 2