Wireless Encryption and Authentication Mechanisms NDE Practice Questions (Page 5)

Questions 21–25

1. 21application · easy

   A public library offers free Wi-Fi with open authentication. A patron complains that their banking session was intercepted. What is the most likely reason this happened?

   • AThe patron's device was not using a firewall.
   • BThe library's router was infected with malware.
   • CThe open network does not encrypt traffic, so an attacker on the same network could sniff the session.
   • DThe library used WEP encryption.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which component in 802.1X acts as the 'gatekeeper' that controls access to the network?

   • AAuthenticator
   • BSupplicant
   • CRADIUS server
   • DAuthentication server
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A legacy wireless network uses shared key authentication with WEP. An attacker captures the challenge-response exchange and is able to authenticate without knowing the key. What is the primary reason this is possible?

   • AWEP uses a weak RC4 key schedule that reveals the key from the challenge.
   • BThe challenge and encrypted response can be replayed to impersonate a legitimate client.
   • CThe access point does not verify the integrity of the response.
   • DThe shared key is transmitted in plaintext during the handshake.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security auditor is reviewing a legacy wireless network that uses WEP. The auditor wants to explain why WEP is considered insecure even with a 128-bit key. Which statement is most accurate?

   • AWEP uses AES-CCMP, which has a known backdoor.
   • BWEP does not use any encryption, so all traffic is sent in plaintext.
   • CThe RC4 cipher is weak, and the 24-bit IV is reused, allowing attackers to recover the key after capturing enough packets.
   • DWEP uses a static key that is never rotated, making it vulnerable to brute-force attacks.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is deploying 802.1X with PEAP-MSCHAPv2 for Wi-Fi. They want to prevent credential theft from a rogue access point. Which additional control is most effective?

   • AUse a longer MSCHAPv2 password.
   • BDisable SSID broadcast.
   • CValidate the RADIUS server certificate on the client and use a strong server certificate.
   • DEnable MAC filtering on the access points.
   Reveal Solution Discussion Select an answer first