DoS on Wireless Networks GAWN Practice Questions (Page 7)

Questions 31–34

1. 31application · medium

   An attacker uses a device to continuously transmit a signal on the same frequency as the corporate Wi-Fi, but the signal does not conform to 802.11 standards. The result is that all wireless clients lose connectivity. Which attack vector is being used?

   • ARF jamming
   • BProtocol manipulation
   • CRogue device
   • DDeauthentication flood
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company's wireless network uses WPA2-Enterprise. An attacker is using a tool to send forged deauthentication frames. The company has enabled 802.11w in 'capable' mode, but the attack continues. What is the most likely reason?

   • AThe attacker is using a different attack vector, such as RF jamming.
   • BThe attacker is spoofing the access point's MAC address.
   • CThe access points are not configured to use 802.11w in the correct mode.
   • DThe clients do not support 802.11w, so they are still vulnerable.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A university library uses an open guest Wi-Fi network. An attacker uses a tool to send continuous deauthentication frames to all clients, causing them to disconnect. Which of the following is the most significant impact of this attack on the library's network?

   • ALoss of availability because legitimate users cannot maintain a connection to the network.
   • BLoss of confidentiality because the attacker can capture the deauthentication frames and read them.
   • CLoss of authentication because the attacker can impersonate the access point.
   • DLoss of integrity because the attacker modifies the deauthentication frames in transit.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   During a wireless penetration test, a consultant deploys a rogue access point configured with the same SSID as the corporate network but with a stronger signal. The consultant then sends crafted deauthentication frames to all clients associated with the legitimate AP. What is the primary objective of this combined attack?

   • ATo capture WPA2 handshakes for offline password cracking.
   • BTo force clients to associate with the rogue AP so the consultant can intercept traffic or harvest credentials.
   • CTo test the AP's ability to handle management frame floods.
   • DTo cause a permanent denial of service by overwhelming the legitimate AP.
   Reveal Solution Discussion Select an answer first