GSEC Wireless Security 2

Question 1

The KRACK (Key Reinstallation Attack) vulnerability targeted which phase of the WPA2 protocol?

Accepted Answer

The 4-way handshake nonce reuse

Answer

The beacon broadcast phase

Answer

The PMKID extraction phase

Answer

The TKIP MIC verification phase

Question 2

Which tool is commonly used during wireless penetration testing to capture packets and perform WPA handshake cracking?

Accepted Answer

Aircrack-ng suite

Answer

Wireshark

Answer

Nessus

Answer

Metasploit Framework

Question 3

What does SSID cloaking (hiding the SSID) provide in terms of wireless security?

Accepted Answer

Minimal obscurity; it is not a real security control

Answer

Strong encryption of the broadcast beacon

Answer

Full protection against wardriving

Answer

Prevention of evil twin attacks

Question 4

Which wireless encryption protocol replaced WEP by using TKIP as a temporary stopgap while using the existing RC4 hardware?

Accepted Answer

WPA (WPA1)

Answer

WPA2

Answer

WPA3

Answer

802.11i

Question 5

An attacker uses a directional antenna and laptop to map wireless networks while driving through neighborhoods. This activity is called:

Accepted Answer

Wardriving

Answer

Warchalking

Answer

Bluesnarfing

Answer

Jamming

Question 6

Which countermeasure best detects rogue access points on a corporate wireless network?

Accepted Answer

Deploying a Wireless Intrusion Detection/Prevention System (WIDS/WIPS)

Answer

Enabling MAC address filtering

Answer

Using WPA3 instead of WPA2

Answer

Disabling SSID broadcast

Question 7

WPA2-Enterprise differs from WPA2-Personal primarily because it:

Accepted Answer

Issues a unique per-user encryption key via 802.1X instead of a shared PSK

Answer

Uses AES-256 instead of AES-128

Answer

Requires WPS (Wi-Fi Protected Setup) to enroll devices

Answer

Operates only on the 5 GHz band