Wireless Attacks and Countermeasures ECSS Practice Questions (Page 8)

Questions 36–39

1. 36application · easy

   A penetration tester is performing a wireless assessment. The tester has identified a target WPA2 network and captured a 4-way handshake. The tester now needs to attempt to recover the passphrase. Which tool should be used?

   • AWireshark
   • BReaver
   • CKismet
   • DAircrack-ng
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which wireless security protocol provides the strongest protection against offline dictionary attacks by using a simultaneous authentication of equals (SAE) handshake?

   • AWPA3
   • BWPA2
   • CWEP
   • DWPA
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which wireless attack involves sending forged management frames to force clients to disconnect from an access point?

   • AEvil twin
   • BRogue access point
   • CJamming
   • DDeauthentication attack
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security analyst is investigating a wireless incident where a user's device connected to a rogue AP that was broadcasting the same SSID as the corporate network. The rogue AP was using WPA2-Personal with a weak passphrase. The analyst captured the traffic and wants to determine if the user's credentials were compromised. Which combination of actions should the analyst take?

   • AUse Wireshark to capture new traffic from the rogue AP and then use Aircrack-ng to decrypt it
   • BUse Aircrack-ng to crack the rogue AP's passphrase and then use Kismet to analyze the traffic
   • CUse Kismet to identify the rogue AP and then use Reaver to crack the WPS PIN
   • DUse Wireshark to decrypt the captured traffic using the rogue AP's passphrase and analyze for cleartext credentials
   Reveal Solution Discussion Select an answer first