Wireless Network Threats

Question 1

An IV attack is usually associated with which of the following wireless protocols?

WEP

WAP

WPA

Answer 1

WEP

An IV attack is usually associated with the WEP wireless protocol

Question 2

What is the size of the initialization vector (IV) that WEP uses for encryption?

6-bit

24-bit

56-bit

Answer 2

24-bit

The initialization vector (IV) that WEP uses for encryption is 24-bit

Question 3

What is the size of the wrapper TKIP places around the WEP encryption with a key that is based on things such as the MAC address of your machine and the serial number of the packet?

128-bit

64-bit

56-bit

Answer 3

128-bit

TKIP places a 128-bit wrapper around the WEP encryption with a key that is based on things such as the MAC address of the host device and the serial number of the packet

Question 4

What technology is used to send data between phones that are in close proximity to each other?

NFC

IBI

IBJ

Answer 4

NFC

Near Field Communication (NFC) is used to send data between phones that are in close proximity

Question 5

What technology is used to simplify network setup by allowing a router to have the administrator push a button on it to allow a new host to join?

WEP

WPA

WPS

Answer 5

WPS

WPS (Wi-Fi Protected Setup) is intended to simplify network setup for home and small offices

Question 6

Which of the following technologies is used to identify and track tags attached to objects?

NFC

RFID

IV

Answer 6

RFID

RFID (Radio Frequency Identification) technology is used to identify and track tags attached to objects

Question 7

What type of attack captures portions of a session to play back later to convince a host that it is still talking to the original connection?

Replay

Echo

Duplication

Answer 7

Replay

A replay attack captures portions of a session to play back later to convince a host that it is still talking to the original connection

Question 8

Which standard defines port-based security for wireless network access control?

802. 1n
803. 1g
804. 1x

Answer 8

802.1x

The 802.1x standard defines port-based security for wireless network access control

Question 9

Which of the following types of attacks involves the sending of unsolicited messages over a Bluetooth connection?

Bluesmurfing

Bluewhaling

Bluejacking

Answer 9

Bluejacking

Bluejacking is the sending of unsolicited messages over a Bluetooth connection

Question 10

Karl has checked into a hotel after a long day of travel. He is attempting to check his daily deluge of email messages using the free in-room Wi-Fi, but it keeps losing the connection. When he calls the front desk, they suggest that he might want to use the premium Wi-Fi (which costs more) to get a better connection. What type of attack could this scenario represent?

Upselling

Cross-selling

Disassociation

Answer 10

Disassociation

With a disassociation attack, the intruder sends a frame to the AP with a spoofed address to make it look like it came from the victim and disconnects them from the network

Question 11

Frustrated with the low signal that the devices in his cubicle receive, Spencer brings in his own access point and creates his own network. Kristin, a co-worker, tells him that if the boss finds out about this it is grounds for immediate dismissal, and he should read the employee handbook if he has any questions. Setting up your own access point represents which of the following?

Degenerate

Rogue

Corporeal

Answer 11

Rogue

A rogue access point is any unauthorized wireless access point on a network

Question 12

During the authentication part of setting up his small office access point, Wolfgang was required to enter a PIN within 60 seconds. This process is known as:

Wired Equivalent Privacy

Wi-Fi Protected Access

Wi-Fi Protected Setup

Answer 12

Wi-Fi Protected Setup

An authentication process that requires the user to do something in order to complete the enrollment process is known as Wi-Fi Protected Setup (WPS)

Question 13

Which security protocol for wireless networks attempts to establish the same security for them as would be present in a wired network?

WEP

WEB

WELL

Answer 13

WEP

Wired Equivalent Privacy (WEP) is a security protocol for 802.11b (wireless) networks that attempts to establish the same security for them as would be present in a wired network

Question 14

Evan fears that the tenant in the office next door is using RF interference to try to force his small company to vacate the building in frustration. Purposely obstructing or interfering with a signal is known as which of the following?

Shoving

Jamming

Cramming

Answer 14

Jamming

Jamming is purposely obstructing or interfering with a signal

Question 15

What is a disassociation attack more commonly known as?

Decertification attack

Disconfirmation attack

Deauthentication attack

Answer 15

Deauthentication attack

A disassociation attack is commonly referred to as a deauthentication attack

Question 16

With near field communication (NFC) technology, the industry tends to use what distance as “near”?

1 inch

1. 2 inches
2. 6 inches

Answer 16

1.6 inches

While there is no hard-coded standard defining “near,” the industry tends to use 4cm (1.6 inches) as the distance

Question 17

With Bluetooth devices suddenly popping up everywhere in your network, you want to secure as many of them as possible. One of the simplest methods of securing these devices is not to set their attribute to:

Discoverable

Transmit

Announce

Answer 17

Discoverable

One of the simplest ways to secure Bluetooth devices is not to set their attribute to Discoverable

Question 18

Which of the following is the gaining of unauthorized access through a Bluetooth connection?

Bluejumping

Bluesnarfing

Bluerunning

Answer 18

Bluesnarfing

Bluesnarfing is the gaining of unauthorized access through a Bluetooth connection

Question 19

A client calls you and says that he wants to turn off the SSID broadcast on his small network because he is afraid that those simply scanning for a network are finding it and trying to connect to it. You inform him that this is a very weak form of security and suggest some other options, but he is insistent on this being done. What is this form of hiding the router known as?

Masking

Shrouding

Cloaking

Answer 19

Cloaking

Cloaking is a method of protecting the network that involves turning off the SSID broadcast. The access point is still there and accessible by those who know of its existence, but it prevents those who are just scanning from finding it

Question 20

Which of the following is attack in which a rogue wireless access point poses as a legitimate wireless service provider to intercept information that users transmit?

Collision

Evil twin

NFC

Answer 20

Evil twin

In an evil twin attack, a rogue wireless access point poses as a legitimate wireless service provider to intercept information that users transmit