Technology Certifications Wireless & Mobile Security 3

Question 1

Which protocol vulnerability in WEP allows attackers to eventually decrypt wireless traffic without knowing the encryption key?

Accepted Answer

Short 24-bit Initialization Vector (IV) reuse weakness

Answer

SAE protocol collision flaw

Answer

AES-128 key length limitation

Answer

TKIP MIC counter failure

Question 2

What is the primary goal of a wireless deauthentication attack against a WPA2-protected network?

Accepted Answer

Force clients to disconnect so their reconnection handshake can be captured for offline cracking

Answer

Permanently disable the target access point

Answer

Assign rogue IP addresses to wireless clients

Answer

Encrypt the attacker's own wireless traffic

Question 3

Which attack exploits a design flaw in Wi-Fi Protected Setup (WPS) PIN authentication, reducing the effective brute-force search space?

Accepted Answer

WPS PIN brute-force attack

Answer

KRACK (Key Reinstallation Attack)

Answer

SSID spoofing

Answer

Deauthentication flood

Question 4

What does the KRACK (Key Reinstallation Attack) vulnerability target in wireless networks?

Accepted Answer

The WPA2 4-way handshake nonce reuse during reconnection

Answer

WEP RC4 IV reuse

Answer

WPS PIN validation

Answer

Bluetooth OBEX protocol parsing

Question 5

Which wireless security countermeasure authenticates and authorizes devices at Layer 2 before granting any network access, using EAP and a backend authentication server?

Accepted Answer

802.1X port-based Network Access Control

Answer

WPA2-Personal pre-shared key

Answer

SSID hiding

Answer

MAC address filtering

Question 6

Which countermeasure is most effective against evil twin access point attacks in an enterprise environment?

Accepted Answer

Using certificate-based authentication (EAP-TLS) that validates the server's certificate

Answer

Increasing wireless transmit power on legitimate APs

Answer

Hiding the corporate network SSID

Answer

Disabling WPS on all access points

Question 7

What security control uses hardware addresses to restrict which devices may connect to a wireless network, and what is its primary weakness?

Accepted Answer

MAC address filtering; MAC addresses can be easily spoofed by attackers

Answer

WPA3-SAE; it requires quantum computing to break

Answer

SSID broadcasting; SSIDs are visible to all nearby devices

Answer

802.1X authentication; it requires complex PKI infrastructure