Certified Ethical Hacker Wireless and IoT Security

Question 1

What is the difference between WPA2 and WPA3 security protocols?

Accepted Answer

WPA3 uses SAE (Simultaneous Authentication of Equals) replacing WPA2's PSK, providing better protection against offline attacks

Answer

WPA3 replaces WPA2's Pre-Shared Key (PSK) with Simultaneous Authentication of Equals (SAE/Dragonfly), providing forward secrecy, protection against offline dictionary attacks, and stronger encryption (192-bit in Enterprise mode).

Question 2

What is an evil twin attack in wireless security?

Accepted Answer

Creating a rogue access point mimicking a legitimate network to intercept traffic

Answer

An evil twin creates a rogue Wi-Fi access point with the same SSID and appearance as a legitimate network, tricking users into connecting to it, allowing the attacker to intercept all transmitted data.

Question 3

What is WPS (Wi-Fi Protected Setup) and why is it considered a security risk?

Accepted Answer

A simplified connection method using PINs that is vulnerable to brute-force attacks due to the PIN's design flaw

Answer

WPS allows easy device connection via an 8-digit PIN, but a design flaw allows the PIN to be brute-forced in two halves (10,000 + 1,000 attempts) rather than 100 million combinations, making it crackable in hours.

Question 4

What security risks are specific to IoT devices?

Accepted Answer

Default credentials, lack of encryption, no update mechanism, and large attack surface

Answer

IoT devices commonly have default/hardcoded passwords, lack encryption for communications, have no mechanism for firmware updates, run minimal security software, and create a massive attack surface when deployed at scale.

Question 5

What is a deauthentication attack in wireless hacking?

Accepted Answer

Sending forged deauth frames to disconnect clients from a legitimate AP, enabling further attacks

Answer

Deauthentication attacks send spoofed deauthentication management frames (which are not encrypted in WPA2) to disconnect clients, enabling capture of the WPA handshake for offline cracking or forcing clients to connect to an evil twin.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Wireless and IoT Security