NSE Wireless & Mobile Security

Question 1

Which authentication protocol is commonly used with 802.1X for enterprise wireless networks?

Accepted Answer

EAP (Extensible Authentication Protocol)

Answer

EAP is the standard authentication framework used with 802.1X and RADIUS servers to provide robust, flexible authentication for enterprise wireless networks.

Question 2

What is the primary purpose of a Wireless Intrusion Prevention System (WIPS)?

Accepted Answer

To detect and prevent unauthorized access points and wireless attacks

Answer

WIPS continuously monitors the RF spectrum to detect rogue access points, unauthorized clients, and wireless attacks, and can automatically contain or block threats.

Question 3

Which WPA3 feature provides forward secrecy and replaces the PSK handshake?

Accepted Answer

SAE (Simultaneous Authentication of Equals)

Answer

SAE replaces the WPA2 PSK handshake in WPA3, generating unique session keys per connection and providing forward secrecy so past sessions cannot be decrypted if keys are compromised.

Question 4

What type of wireless attack involves setting up a rogue access point that mimics a legitimate one to intercept traffic?

Accepted Answer

Evil Twin attack

Answer

An Evil Twin attack creates a malicious access point with the same SSID and similar characteristics as a legitimate AP, tricking clients into connecting so traffic can be intercepted.

Question 5

Which wireless security protocol is considered critically vulnerable and must never be used in modern networks?

Accepted Answer

WEP (Wired Equivalent Privacy)

Answer

WEP uses weak RC4 encryption with static keys and flawed IV implementation, allowing an attacker to crack the key by capturing as few as 50,000 packets.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Wireless & Mobile Security