Question 1

Amongst the most common transport encryption algorithms,used to securely transmit documents over the Internet is which of the following?

Accepted Answer

SSL (Secure Sockets Layer) is a commonly used transport encryption algorithm that provides secure transmission of documents over the Internet. HTTP (Hypertext Transfer Protocol) is a protocol used for the transmission of data over the Internet but does not provide encryption. SSH (Secure Shell) is a protocol used for secure remote access to a computer, but is not specifically used for document transmission. SNMP (Simple Network Management Protocol) is a protocol used for network management and monitoring, but does not provide encryption for document transmission.

Question 2

What authentication system did the proposed WEP2 standard use?

Accepted Answer

A

Question 3

Which type of WIDS/WIPS sensor uses dedicated sensors for scanning the RF for attacks?

Accepted Answer

Overlay WIDS/WIPS use dedicated sensors specifically for scanning the radio frequency (RF) environment to detect and protect against attacks, separate from the primary wireless network infrastructure.

Question 4

Dictionary attacks are used to attack what aspect of WEP2?

Accepted Answer

Dictionary attacks are used to attack the authentication aspect of WEP2 by attempting to guess the password or passphrase used for authentication.

Question 5

A ____ VPN is a user-to-LAN connection used by remote users.

Accepted Answer

A remote-access VPN is specifically designed to provide a secure and encrypted connection for individual users who are working remotely or connecting from a remote location. This type of VPN enables remote workers to securely access the resources of a corporate network over an internet connection. Option B, site-to-site VPN, is used to connect two or more networks together, whereas peer-to-peer VPN is a decentralized approach in which users connect to each other directly without relying on a centralized server. Option D, remote-to-LAN, is not a commonly used term for describing VPNs.

Question 6

Which of the following is NOT a typical AP status tagged by a WIDS/WIPS system?

Accepted Answer

The answer of Which of the following is NOT a...

Question 7

WPA2 uses a block cipher rather than a stream cipher.

Accepted Answer

The answer of WPA2 uses a block cipher rather than...

Question 8

A virtual private network (VPN)uses a public,unsecured network as if it were a private,secured network.

Accepted Answer

A VPN encrypts data to create a secure connection over a public network, such as the internet, making it appear as a private network. This allows users to access the internet securely and privately as if they were connected to a private network.

Question 9

Which was developed to help users who have little or no knowledge of security quickly and easily implement WPA2 on their WLANs?

Accepted Answer

WPS (Wi-Fi Protected Setup) was developed to make it easy for users to set up a secure wireless network. It simplifies the process of configuring WPA2 security by providing an easy-to-use method for adding devices to the network securely. This is particularly useful for users who have limited knowledge of security, as WPS automates the process and removes the need for them to understand the complexities of WPA2 configuration.

Question 10

What does WPA include that is designed to prevent an attacker from conducting man-in-the-middle attacks?

Accepted Answer

WPA includes a message integrity check, which ensures that the data has not been tampered with during transmission and prevents man-in-the-middle attacks. The other options, such as cyclic redundancy check, preshared key, and temporal key, do not specifically address this type of attack.

Question 11

WEP2 attempted to overcome the limitations of WEP by adding two new security enhancements.

Accepted Answer

WEP2 added two new security enhancements: Temporal Key Integrity Protocol (TKIP) and Michael.

Question 12

Which encryption protocol is used for 802.11i/WPA2?

Accepted Answer

CCMP (Counter Cipher Mode with Block Chaining Message Authentication Code Protocol) is the encryption protocol used for 802.11i/WPA2. It is considered to be more secure than its predecessor, TKIP, as it uses the Advanced Encryption Standard (AES). Therefore, the best choice is B.

Question 13

Which of the following is true about RADIUS?

Accepted Answer

The answer of Which of the following is true about...

Question 14

Signature-based monitoring can be described as which of the following?

Accepted Answer

Signature-based monitoring examines network traffic, activity, and transactions and looks for well-known patterns, such as known malicious codes, viruses, or malware. It compares observed network behavior to an established database of patterns or signatures to detect possible threats.

Question 15

Due to the enhancements in WEP2,it was widely implemented and remains a popular security mechanism today.

Accepted Answer

This statement is false. WEP2 is not a commonly implemented security mechanism today as it has been found to have vulnerabilities and has been largely replaced by stronger security protocols such as WPA2.

Question 16

What does WPA use for authentication?

Accepted Answer

WPA uses preshared key authentication for devices to connect to the network. This involves sharing a secret passphrase between the access point and the client device to ensure that only authorized devices can join the network.

Question 17

Which problem did dynamic WEP resolve?

Accepted Answer

Dynamic WEP solved the weak IV problem, which was a vulnerability in the original WEP standard that allowed attackers to effectively predict and break WEP encryption keys. However, dynamic WEP did not address other vulnerabilities such as man-in-the-middle attacks, denial of service attacks, or dictionary attacks.

Question 18

Kerberos became the heart of the WPA security method.

Accepted Answer

Kerberos is a network authentication protocol while WPA (Wi-Fi Protected Access) is a security protocol for wireless networks. Although Kerberos was used in some forms of WPA, it was not the heart of the security method.

Question 19

What was a design goal of WPA?

Accepted Answer

WPA was designed to be an interim solution to WEP vulnerabilities that could be implemented through firmware updates on existing WEP-enabled devices, thus fitting into the existing WEP engine without requiring new hardware.

Question 20

It is important that the entire RF spectrum be scanned for potential attacks,which means the channels on which frequencies should be scanned?

Accepted Answer

The channels on which frequencies should be scanned are 2.4 GHz and 5 GHz. These are the most common frequency bands used for wireless communication and are therefore most likely to be targeted by attackers. Scanning these frequencies will allow for detection and prevention of potential attacks. Option A is incorrect because 11 GHz and 54 GHz are not commonly used frequencies for wireless communication. Option B is incorrect because 2.4 MHz and 3.5 MHz are well below the frequency range used for wireless communication. Option D is incorrect because 11 MHz and 54 MHz are also not commonly used frequencies for wireless communication.

Quiz 10: Implementing Wireless LAN Security