Security Protocols & Network Optimization Flashcards

Which 802.11 amendment introduced the Robust Security Network (RSN) framework?

Answer: 802.11i

802.11i defined the RSN framework, mandating CCMP/AES encryption and replacing the flawed WEP standard.

A wireless technician needs to prevent rogue APs from associating with the corporate WLAN. Which feature should be enabled on the WLAN controller?

Answer: Rogue AP containment

Rogue AP containment actively de-authenticates clients that attempt to connect to unauthorized access points.

What is the purpose of the 4-Way Handshake in WPA2?

Answer: To derive and verify the Pairwise Transient Key (PTK)

The 4-Way Handshake uses the PMK to mutually derive and confirm the PTK used for unicast frame encryption.

Which QoS access category provides the highest priority for time-sensitive traffic like VoIP?

Answer: AC_VO (Voice)

AC_VO has the shortest AIFSN and TXOP values, giving voice traffic the lowest contention window and fastest channel access.

An enterprise WLAN uses 802.1X. A client presents credentials to the AP, which forwards them to an authentication server. What role does the AP play in this architecture?

Answer: Authenticator

In 802.1X, the AP acts as the Authenticator, relaying EAP messages between the supplicant (client) and authentication server.

Which attack exploits the WPS PIN authentication mechanism to gain unauthorized access to a WPA2 network?

Answer: Pixie Dust / Brute-force WPS PIN attack

The WPS PIN can be brute-forced in ~11,000 attempts due to its split-PIN design flaw; the Pixie Dust attack exploits weak nonce generation.

A technician is optimizing channel reuse in a 2.4 GHz deployment. Which set of non-overlapping channels should be used?

Answer: 1, 6, 11

Channels 1, 6, and 11 are the only three non-overlapping 20 MHz channels in the 2.4 GHz band in North America.