Certified Ethical Hacker Wireless and IoT Security 5

Question 1

A penetration tester wants to put a wireless adapter into a mode that captures all 802.11 frames in the air. Which mode is required?

Accepted Answer

Monitor mode

Answer

Managed mode

Answer

Master mode

Answer

Ad-hoc mode

Question 2

Which attack denies wireless service by transmitting high-power noise on the same frequency as the target network?

Accepted Answer

RF jamming

Answer

ARP spoofing

Answer

DNS poisoning

Answer

SQL injection

Question 3

What is the recommended mitigation against rogue and evil twin access points in an enterprise?

Accepted Answer

Deploying a Wireless Intrusion Prevention System (WIPS)

Answer

Disabling encryption entirely

Answer

Using only WEP

Answer

Broadcasting more SSIDs

Question 4

An IoT camera communicates over unencrypted HTTP. Which OWASP IoT category does this transmission flaw fall under?

Accepted Answer

Insecure data transfer and storage

Answer

Insecure network services

Answer

Lack of secure update mechanism

Answer

Use of insecure components

Question 5

Which protocol is widely used for IoT messaging and, if left unauthenticated on port 1883, can leak sensor data?

Accepted Answer

MQTT

Answer

SMTP

Answer

SNMP

Answer

FTP

Question 6

Why is the lack of a secure firmware update mechanism a critical IoT vulnerability?

Accepted Answer

It prevents patching of discovered vulnerabilities

Answer

It increases device battery life

Answer

It improves signal strength

Answer

It encrypts all stored data automatically

Question 7

Which technique hides a wireless network by not broadcasting its SSID, and why is it not a strong security control?

Accepted Answer

SSID cloaking; the SSID still appears in client probe and association frames

Answer

WPA3 SAE; it leaks the password

Answer

MAC filtering; it blocks all traffic

Answer

Channel hopping; it disables encryption