Deck 7: Understanding Wireless Security

Question 1

Which layer does wireless communication rely heavily upon?

A) MAC sublayer of the Network layer
B) MAC sublayer of the Data Link layer
C) LLC sublayer of the Data Link layer
D) LLC sublayer of the Transport layer

Answer 1

B

Question 2

A RTS frame is the first step of the two-way handshake before sending a data frame.

Answer 2

True

Question 3

SNMP requires the installation of an SNMP agent on the device you want to monitor.

Answer 3

True

Question 4

Wireless networks are inherently secure because the original IEEE 802.11 standard addressed strong authentication and encryption.

Question 5

Which of the following is NOT a field in a control frame?

A) Duration
B) Sequence control
C) Frame control
D) Frame check sequence

Question 6

Wireless networks are essentially the same as wired networks when it comes to the security threats each faces.

Question 7

In which type of wireless attack does the attacker cause valid users to lose their connections by sending a forged deauthentication frame to their stations?

A) association flood
B) jamming
C) session hijacking
D) MAC address spoofing

Question 8

Which of the following is true about the association process?

A) it is a three-step process
B) a station first listens for beacons
C) a station first send an association request
D) the AP transmits an invitation to associate

Question 9

In which type of attack do attackers intercept the transmissions of two communicating nodes without the user's knowledge?

A) rogue device
B) wardriver
C) man-in-the-middle
D) brute force

Question 10

What is considered to be one of the biggest weaknesses of WEP?

A) 24-bit initialization vector
B) RC4 encryption
C) 128-bit key
D) Kerberos authentication

Question 11

Which type of control frame does a station send to let the AP know is can transmit buffered frames?

A) CTS
B) ACK
C) RTS
D) PS-Poll

Question 12

What is a WNIC's equivalent of a NIC's promiscuous mode?

A) active scan mode
B) RF monitor mode
C) passive attack mode
D) auto-capture mode

Question 13

Wireless networks use the CSMA/CD media access method.

Question 14

Which of the following is true about the SSID?

A) they can be Null
B) they are registered
C) they are not found in beacon frames
D) they are found in control frames

Question 15

Which management frame type is sent by a station wanting to terminate the connection?

A) Deauthentication
B) Disassociation
C) Reassociation request
D) Probe response

Question 16

Which of the following is true about wardriving?

A) attackers use RF monitor mode
B) the hardware is very expensive
C) the software is very expensive
D) their goal is simply to hijack a connection

Question 17

Which of the following is NOT part of a wireless MAC frame?

A) 802.11 protocol version
B) source MAC address
C) FCS
D) TTL

Question 18

Which type of frame advertises services or information on a wireless network?

A) Probe request
B) Association response
C) Beacon
D) Probe response

Question 19

What function does a RADIUS server provide to a wireless network?

A) association
B) encryption
C) decryption
D) authentication

Question 20

Which of the following is performed by the MAC sublayer?

A) joining the wireless network
B) resolving IP address to MAC address
C) resolving names to IP addresses
D) determining best path

Question 21

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
capturing network traffic during transmission

Question 22

MIBs gather data and report it to a(n)____________________ management station.

Question 23

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
an in-depth examination of a proposed wireless network site

Question 24

___________ key encryption in WEP uses the RC4 encryption algorithm.

Question 25

A ____________ response is sent by a station in response to a request frame and indicates capabilities,supported data rates,and other information.

Question 26

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
any keys used between a pair of devices in TKIP

Question 27

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
a type of control frame that gives a station clearance to begin transmitting packets

Question 28

Which of the following is true about MAC addresses in a wireless network?

A) MAC address filtering will stop a determined attacker
B) MAC addresses are Network layer identities
C) you need to configure the MAC address before you use the WNIC
D) you can change a WNICs MAC address with software

Question 29

Which EAP protocol requires digital certificates to validate supplicants?

A) EAP-TLS
B) EAP-TTLS
C) LEAP
D) FAST

Question 30

A _____________ device is a wireless device that employees connect and use without authorization or verified configurations.

Question 31

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
the process of using a variety of tools and techniques to attempt to break into a network

Question 32

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
the encryption and authentication architecture based on the final ratified IEEE 802.11i standard

Question 33

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
an encryption method devised as a replacement for WEP in WPA

Question 34

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
a two-step process of being accepted into a wireless network

Question 35

Which of the following is NOT a suggested practice before using a newly configured wireless network?

A) change the administrator password
B) change the manufacturer's default key
C) use the default encryption method
D) alter the default channel

Question 36

Each access point has a(n)______________ that essentially functions as the name of the network.

Question 37

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
a type of control frame that a station sends when it wants to transmit

Question 38

Which popular wireless sniffer is an IDS that is passive and undetectable in operation?

A) Kismet
B) NetStumbler
C) AirSnort
D) Aircrack-ng

Question 39

Which of the following is true about IEEE 802.11i?

A) it uses WEP2 for authentication and encryption
B) it uses a symmetric block cipher for encryption
C) temporal key integrity protocol is used for encryption
D) it uses PMK to generate data encryption keys

Question 40

MATCHING
a.active attacks
b.association
c.clear to send
d.pairwise keys
e.penetration testing
f.request to send
g.site survey
h.sniffing
i.TKIP
j.WPA2
attacks that attempt to gather information for subsequent attacks by sending probe request frames on each available channel

Question 41

List the three types of MAC frames defined by the 802.11 standard.

Question 42

How is wireless security different than wired security?

Question 43

Describe 802.1x authentication.

Question 44

List the four most common types of control frames.

Question 45

What is the purpose of MAC address filtering and how can attackers defeat it?

Question 46

List and define the fields in a control frame.

Question 47

Describe forged deauthentication.

Question 48

List four issues that a wireless security policy should address.

Question 49

What are the two authentication methods provided by early 802.11 standards?

Question 50

What is a site survey and why should you conduct one?