NSE Wireless & Mobile Security 3

Question 1

What is the primary security benefit of segmenting wireless networks using VLANs?

Accepted Answer

It isolates different user groups and controls traffic flow between network segments

Answer

It increases wireless transmission speed and reduces latency

Answer

It automatically assigns IP addresses based on device type

Answer

It improves channel efficiency by reducing RF interference

Question 2

What is a 'Karma attack' in the context of wireless security?

Accepted Answer

An attack that responds to client probe requests to lure devices to connect to a malicious AP

Answer

An attack that brute-forces WPA3 SAE handshakes

Answer

A Bluetooth-based man-in-the-middle eavesdropping technique

Answer

An attack targeting 5G cellular network authentication protocols

Question 3

What is the recommended minimum password length for WPA2-Personal (PSK) to effectively resist dictionary and brute-force attacks?

Accepted Answer

16 characters with mixed case, numbers, and symbols

Answer

8 characters (the protocol minimum)

Answer

12 characters with mixed case

Answer

20 characters with maximum entropy

Question 4

Which IEEE 802.11 amendment introduced Management Frame Protection (MFP) to defend against deauthentication attacks?

Accepted Answer

IEEE 802.11w

Answer

IEEE 802.11a

Answer

IEEE 802.11i (WPA2)

Answer

IEEE 802.11n

Question 5

Which enterprise technology automatically detects when a mobile device leaves a trusted corporate network and enforces VPN connectivity?

Accepted Answer

Trusted Network Detection (TND)

Answer

WPA3-Enterprise authentication

Answer

Wi-Fi Passpoint (Hotspot 2.0)

Answer

Per-App VPN tunneling

Question 6

In Fortinet's Security Fabric, what is the primary function of FortiAP?

Accepted Answer

To serve as a managed wireless access point integrated with and controlled by FortiGate

Answer

To provide centralized firewall policy enforcement for wired networks

Answer

To perform deep packet inspection on wired traffic flows

Answer

To manage SSL VPN tunnels for remote users

Question 7

What security mechanism prevents wireless clients from connecting to rogue authentication servers impersonating legitimate ones in WPA2-Enterprise deployments?

Accepted Answer

Server certificate validation through a trusted PKI chain

Answer

MAC address filtering on the RADIUS server

Answer

SSID cloaking on the corporate access points

Answer

RF power management to limit signal propagation