Certified Ethical Hacker Wireless and IoT Security 3

Question 1

The KRACK attack against WPA2 exploits a flaw in which part of the protocol?

Accepted Answer

The four-way handshake key reinstallation

Answer

The DHCP lease renewal

Answer

The SSID beacon interval

Answer

The RADIUS shared secret

Question 2

Which improvement does WPA3 introduce to resist offline dictionary attacks on the password?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

Pre-Shared Key with RC4

Answer

Open authentication

Answer

WEP fallback

Question 3

An IoT device ships with the default credentials admin/admin and exposes Telnet. Which botnet famously exploited this pattern?

Accepted Answer

Mirai

Answer

Conficker

Answer

Stuxnet

Answer

WannaCry

Question 4

Which short-range wireless protocol is commonly targeted in IoT attacks and operates in the 2.4 GHz band using 16 channels?

Accepted Answer

Zigbee

Answer

LoRaWAN

Answer

NFC

Answer

Cellular LTE

Question 5

What is 'bluesnarfing'?

Accepted Answer

Unauthorized access to data on a Bluetooth device

Answer

Sending unsolicited messages over Bluetooth

Answer

Jamming a Bluetooth signal

Answer

Pairing two devices automatically

Question 6

Which OWASP IoT Top 10 issue does using hardcoded passwords in firmware represent?

Accepted Answer

Weak, guessable, or hardcoded passwords

Answer

Insecure data transfer

Answer

Lack of physical hardening

Answer

Insufficient privacy protection

Question 7

Which tool would a tester most likely use to perform a software-defined radio (SDR) analysis of IoT RF signals?

Accepted Answer

HackRF with GNU Radio

Answer

Wireshark

Answer

John the Ripper

Answer

sqlmap