CompTIA Network+ Network+ Wireless Security Protocols 2 — Questions and Answers
Question 1: Which WPA3 feature replaces the Pre-Shared Key (PSK) handshake to protect against offline dictionary attacks?
- SAE (Simultaneous Authentication of Equals) (Correct answer)
- CCMP
- TKIP
- EAP-TLS
Correct answer: SAE (Simultaneous Authentication of Equals)
WPA3 uses SAE, a Dragonfly-based handshake that provides forward secrecy and resists offline brute-force attacks.
Question 2: A company deploys WPA2-Enterprise. Which server handles credential authentication for wireless clients?
- RADIUS (Correct answer)
- DHCP
- DNS
- LDAP only
Correct answer: RADIUS
WPA2-Enterprise uses a RADIUS server to centrally authenticate wireless clients via EAP.
Question 3: What is the primary vulnerability exploited by the KRACK (Key Reinstallation Attack) against WPA2?
- The four-way handshake nonce reuse (Correct answer)
- Weak RC4 encryption
- Default SSIDs
- Short IV values
Correct answer: The four-way handshake nonce reuse
KRACK forces nonce reuse during the WPA2 four-way handshake, allowing an attacker to decrypt traffic.
Question 4: Which cipher suite does WPA2 mandate for protecting data confidentiality?
- CCMP/AES (Correct answer)
- TKIP/RC4
- WEP/RC4
- 3DES/CBC
Correct answer: CCMP/AES
WPA2 requires CCMP with AES-128 for data encryption, replacing the weaker TKIP used in WPA.
Question 5: An attacker captures the WPA2 four-way handshake and runs an offline password cracking tool. Which preventive measure is MOST effective?
- Using a long, complex passphrase (Correct answer)
- Disabling SSID broadcast
- Enabling MAC filtering
- Reducing beacon interval
Correct answer: Using a long, complex passphrase
A strong, complex passphrase makes offline dictionary and brute-force attacks computationally infeasible.
Question 6: Which wireless security protocol introduced the concept of per-packet key mixing to address WEP's IV weaknesses?
- TKIP (Correct answer)
- CCMP
- SAE
- EAP
Correct answer: TKIP
TKIP introduced per-packet key mixing, a message integrity check, and IV sequencing to overcome WEP's weaknesses.
Question 7: In WPA3-Enterprise mode, what is the minimum encryption strength required?
- 192-bit security suite (Correct answer)
- 128-bit AES
- 64-bit DES
- 256-bit RSA
Correct answer: 192-bit security suite
WPA3-Enterprise requires a 192-bit security suite aligned with Suite B cryptography for high-security environments.
CompTIA Network+ Network+ Wireless Security Protocols 2
Which WPA3 feature replaces the Pre-Shared Key (PSK) handshake to protect against offline dictionary attacks?