NSE Wireless & Mobile Security 3

Question 1

What is the primary security benefit of segmenting wireless networks using VLANs?

Accepted Answer

It isolates different user groups and controls traffic flow between network segments

Answer

Wireless VLAN segmentation places users into separate broadcast domains, isolating guest traffic from corporate resources and enforcing firewall policies between segments.

Question 2

What is a 'Karma attack' in the context of wireless security?

Accepted Answer

An attack that responds to client probe requests to lure devices to connect to a malicious AP

Answer

A Karma attack exploits wireless clients' behavior of broadcasting probe requests for known networks, responding to these probes with matching SSIDs to trick clients into connecting to a rogue AP.

Question 3

What is the recommended minimum password length for WPA2-Personal (PSK) to effectively resist dictionary and brute-force attacks?

Accepted Answer

16 characters with mixed case, numbers, and symbols

Answer

While WPA2-PSK requires a minimum of 8 characters, security best practices recommend at least 16 characters with complexity to provide sufficient entropy against offline dictionary attacks.

Question 4

Which IEEE 802.11 amendment introduced Management Frame Protection (MFP) to defend against deauthentication attacks?

Accepted Answer

IEEE 802.11w

Answer

IEEE 802.11w introduced cryptographic protection for unicast management frames (including deauth and disassociation frames), preventing spoofed management frame attacks.

Question 5

Which enterprise technology automatically detects when a mobile device leaves a trusted corporate network and enforces VPN connectivity?

Accepted Answer

Trusted Network Detection (TND)

Answer

Trusted Network Detection (TND) monitors network characteristics to determine if the device is on a trusted corporate network and automatically triggers VPN connection when it detects an untrusted environment.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Wireless & Mobile Security 3