Certified Ethical Hacker Wireless and IoT Security 4

Question 1

In an enterprise WPA2-Enterprise deployment, which server authenticates users via 802.1X?

Accepted Answer

RADIUS server

Answer

DNS server

Answer

DHCP server

Answer

NTP server

Question 2

An attacker captures the PMKID directly from an AP without needing a client. This clientless attack targets which technology?

Accepted Answer

WPA/WPA2 with roaming enabled

Answer

WEP

Answer

Bluetooth LE

Answer

NFC

Question 3

What is the main purpose of MAC address filtering on a wireless network, and why is it weak?

Accepted Answer

It restricts which devices connect but MACs can be spoofed

Answer

It encrypts traffic but uses weak keys

Answer

It hides the SSID from scanners

Answer

It blocks deauth frames but causes lag

Question 4

Which attack involves sending unsolicited messages to nearby Bluetooth devices?

Accepted Answer

Bluejacking

Answer

Bluesnarfing

Answer

Bluebugging

Answer

Blueprinting

Question 5

Bluebugging gives an attacker what capability over a victim's Bluetooth phone?

Accepted Answer

Remote control of the device's commands and calls

Answer

Only the ability to read the device name

Answer

Ability to charge the device wirelessly

Answer

Ability to upgrade firmware safely

Question 6

Which frequency band is used by most LoRaWAN IoT deployments to achieve long-range, low-power communication?

Accepted Answer

Sub-GHz ISM bands (e.g., 868/915 MHz)

Answer

2.4 GHz only

Answer

5 GHz only

Answer

60 GHz mmWave

Question 7

When extracting firmware from an IoT device for analysis, which tool is commonly used to identify and unpack embedded file systems?

Accepted Answer

Binwalk

Answer

Nikto

Answer

Hydra

Answer

Responder