Technology Certifications Wireless & Mobile Security 3

Question 1

Which protocol vulnerability in WEP allows attackers to eventually decrypt wireless traffic without knowing the encryption key?

Accepted Answer

Short 24-bit Initialization Vector (IV) reuse weakness

Answer

WEP's 24-bit IV space is too small and reuses values frequently; collecting enough packets allows statistical analysis (FMS/Korek attacks) to recover the RC4 key.

Question 2

What is the primary goal of a wireless deauthentication attack against a WPA2-protected network?

Accepted Answer

Force clients to disconnect so their reconnection handshake can be captured for offline cracking

Answer

Deauthentication attacks send forged 802.11 management frames to disconnect clients, forcing them to re-authenticate and generating a WPA2 4-way handshake the attacker can capture and crack offline.

Question 3

Which attack exploits a design flaw in Wi-Fi Protected Setup (WPS) PIN authentication, reducing the effective brute-force search space?

Accepted Answer

WPS PIN brute-force attack

Answer

WPS PIN is split into two halves verified independently, reducing the 8-digit PIN from 100 million possibilities to roughly 11,000 guesses — making brute-force feasible.

Question 4

What does the KRACK (Key Reinstallation Attack) vulnerability target in wireless networks?

Accepted Answer

The WPA2 4-way handshake nonce reuse during reconnection

Answer

KRACK forces nonce reuse during the WPA2 4-way handshake by replaying handshake messages, allowing attackers to decrypt, replay, and potentially forge encrypted packets.

Question 5

Which wireless security countermeasure authenticates and authorizes devices at Layer 2 before granting any network access, using EAP and a backend authentication server?

Accepted Answer

802.1X port-based Network Access Control

Answer

802.1X blocks all network traffic from a port until the connecting device successfully authenticates via EAP to a RADIUS server, providing strong, identity-based access control.

Technology Certifications Practice Test

Technology Certifications Practice Test

Technology Certifications Wireless & Mobile Security 3