Technology Certifications Wireless & Mobile Security 1 — Questions and Answers
Question 1: Which wireless security protocol is considered the most secure for modern enterprise networks?
- WEP (Wired Equivalent Privacy)
- WPA (Wi-Fi Protected Access)
- WPA2-Personal with TKIP
- WPA3-Enterprise (Correct answer)
Correct answer: WPA3-Enterprise
WPA3-Enterprise provides the strongest wireless security using 192-bit cryptographic strength and SAE for authentication, replacing vulnerable WPA2 mechanisms.
Question 2: What type of wireless attack involves setting up an unauthorized access point that mimics a legitimate one to intercept user traffic?
- Wardriving
- Evil twin attack (Correct answer)
- Bluejacking
- Packet injection
Correct answer: Evil twin attack
An evil twin attack creates a rogue access point with the same SSID as a legitimate network, tricking users into connecting so the attacker can intercept traffic.
Question 3: WPA3 uses which key exchange mechanism to provide forward secrecy and resistance to offline dictionary attacks?
- RSA key exchange
- Pre-Shared Key (PSK)
- Simultaneous Authentication of Equals (SAE) (Correct answer)
- TKIP with RC4
Correct answer: Simultaneous Authentication of Equals (SAE)
WPA3 uses SAE (also known as the Dragonfly handshake) for key exchange, providing forward secrecy so captured traffic cannot be decrypted later.
Question 4: What is the primary function of a Wireless Intrusion Prevention System (WIPS)?
- Increase wireless network throughput
- Assign IP addresses to wireless clients
- Detect and block unauthorized wireless devices and attacks (Correct answer)
- Automatically update wireless firmware
Correct answer: Detect and block unauthorized wireless devices and attacks
A WIPS monitors the radio frequency spectrum to detect rogue access points, unauthorized clients, and active attacks, then automatically responds to block them.
Question 5: Which authentication framework requires a RADIUS server and provides centralized user authentication in enterprise wireless deployments?
- WPA2-Personal
- MAC address filtering
- 802.1X (Correct answer)
- WEP shared key
Correct answer: 802.1X
802.1X is an IEEE standard for port-based network access control that uses EAP and a backend RADIUS server for centralized, per-user authentication.
Question 6: What security limitation makes SSID cloaking (hiding the network name) an ineffective standalone security control?
- It prevents WPA2 encryption from functioning correctly
- Hidden SSIDs are still visible in probe requests captured by passive scanners (Correct answer)
- It blocks legitimate clients from ever connecting
- It disables MAC address filtering
Correct answer: Hidden SSIDs are still visible in probe requests captured by passive scanners
Even when beacon broadcasts are suppressed, the SSID is still transmitted in probe requests and responses, making it trivially discoverable with wireless scanning tools like Wireshark.
Question 7: Which IEEE 802.11 wireless standard introduced the 6 GHz frequency band to reduce congestion and improve performance?
- 802.11ac (Wi-Fi 5)
- 802.11n (Wi-Fi 4)
- 802.11ax (Wi-Fi 6E) (Correct answer)
- 802.11g
Correct answer: 802.11ax (Wi-Fi 6E)
802.11ax Wi-Fi 6E extends into the 6 GHz band, providing additional spectrum, less interference, and higher throughput compared to prior standards limited to 2.4/5 GHz.
