Wireless Client Attacks GAWN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security analyst is investigating a report that a user's laptop was compromised while using the airport's Wi-Fi. The analyst suspects a man-in-the-middle attack. The user was using a web application that did not enforce HTTPS. Which attack technique would most likely have been used to intercept and modify the user's traffic?

   • ASending deauthentication frames to the user's device to force it to reconnect to the legitimate AP.
   • BDeploying a client-side exploit that installs a malicious browser extension on the user's device.
   • CSetting up a rogue AP with the same SSID as the airport's Wi-Fi and using ARP spoofing to redirect traffic through the attacker's device.
   • DUsing a tool to capture the user's probe requests and identify their preferred networks.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A penetration tester is assessing a corporate campus where employees use personal devices. The tester wants to identify which corporate SSIDs are preferred by employees' devices in order to later launch a targeted attack. The tester is in a parking lot near the building. Which technique would be most effective for this reconnaissance phase?

   • AUse a spectrum analyzer to detect the channels used by the corporate APs.
   • BPassively monitor the airwaves for probe requests from client devices to collect preferred network names.
   • CSend deauthentication frames to the corporate AP and capture the reconnection requests.
   • DBroadcast a beacon with a common SSID and wait for clients to send association requests.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In a man-in-the-middle attack on a wireless client, what does the attacker do?

   • AIncreases the signal strength of the client's connection
   • BDeletes all files from the client device
   • CIntercepts and potentially modifies communication between the client and the network
   • DChanges the client's MAC address
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A network administrator wants to mitigate the risk of evil twin attacks against employees using the corporate Wi-Fi. The company uses WPA2-Enterprise with PEAP. Which configuration change would be most effective in preventing clients from connecting to a rogue AP that impersonates the corporate SSID?

   • AConfigure clients to validate the server certificate during EAP authentication.
   • BEnable client isolation on the corporate APs to prevent clients from communicating directly with each other.
   • CUse a stronger encryption protocol like WPA3 instead of WPA2.
   • DDisable SSID broadcast on the corporate APs to make the network less visible.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What distinguishes an evil twin attack from a rogue access point attack?

   • AThe evil twin is always a physical device, while a rogue AP is software-based
   • BThe evil twin impersonates a specific legitimate access point by using the same SSID and security settings
   • CThe evil twin only captures traffic, while a rogue AP only steals credentials
   • DThe evil twin uses a different SSID to attract clients
   Reveal Solution Discussion Select an answer first