3.4 Install and Configure Secure Wireless Settings

Question 1

Wifi encryption that utilizes CCMP block cipher code

Answer 1

WPA2

Question 2

Wifi encryption that utlizes GCMP block cipher mode

Answer 2

WPA3

Question 3

What is used to ensure data confidentiality when transmitting data via wireless connections?

Answer 3

AES

Question 4

What type of check is used to verify that the data sent over a wifi connection was not altered during transport?

Answer 4

Message integrity check (MIC)

Question 5

What is the major issue with WPA2 security?

Answer 5

Pre shared key (PSK) brute force attacks

Question 6

How has WPA3 fixed the PSK issue with WPA2?

Answer 6

Mutual authentication between device and AP

Perfect forward secrecy

Question 7

What key exchange is SAE derived from?

Answer 7

Diffie-hellman

Question 8

What handshake is used in WPA3 that is commonly referred to the dragonfly handshake and involves a unique session key for each session, even if the Private key is shared?

Answer 8

Simultaneous Authentication of Equals (SAE)

Question 9

Method used by shared or public wifi instances that requires login via a webpage in order to access the internet.

Answer 9

Captive portal

Question 10

Wifi authentication method that allows ease of setup for mobile devices, and can use different methods such as a PIN, a push button on the wireless device, or NFC

Answer 10

Wifi protected setup (WPS)

Question 11

What is a major flaw with WPS in regards to the PIN number?

Answer 11

The PIN is highly susceptible to brute force attacks

Question 12

Base framework for wireless authentication

Answer 12

Extensible Authentication Protocol (EAP)

Question 13

What is IEEE 802.1X frequently called?

Answer 13

Port-Based Network Access Control (NAC)

Question 14

What are the 3 main components to EAP authentication over 802.1X?

Answer 14

Supplicant (the user logging in)
Authenticator
Authentication server (LDAP, RADIUS, etc.)

Question 15

What is EAP-FAST?

Answer 15

EAP Flexible Authentication via Secure Tunneling

Uses a TLS tunnel to send authentication between supplicant and Authentication server using a PAC

Question 16

EAP that uses a TLS tunnel that does not use a PAC certificate.

Answer 16

PEAP (Protected EAP)

Question 17

The most common implementation of EAP that requires certificates on all devices including the authentication server. Mutual authentication is made and then a TLS tunnel is built.

Answer 17

EAP-TLS

Question 18

EAP implementation that utilizes a TLS tunnel for authentication, but only requires a single certificate rather than certificates on all devices.

Answer 18

EAP-TTLS

Question 19

Why should you cease data transmission from you device when performing a wireless packet analysis?

Answer 19

You can’t hear if you’re talking

Question 20

What type of device is used to manage multiple APs?

Answer 20

Wireless controller