Wireless Security and Vulnerabilities Quiz

A WLAN attack where an attacker intercepts the HTTPS public encryption key from a web server and decrypts login credentials in real-time.

A security measure in TKIP (Temporal Key Integrity Protocol) that uses a unique counter to prevent replay attacks. The counter is incremented for each MPDU (MAC Protocol Data Unit) transmitted, ensuring that each frame is unique.

A security solution that uses a unique pre-shared key (PSK) to encrypt wireless traffic. This is the most basic and common security solution for home and small business networks.

A set of security standards required for a wireless network to be certified as Robust Security Network (RSN). The primary criteria is not using WEP for encryption.

This is a pre-authentication security solution that uses the ISAKMP (Internet Security Association and Key Management Protocol) for key exchange. This is a strong security solution, especially when combined with IPSec, making it a reliable choice for establishing secure communication links between networks.

A secure and widely compatible wireless security solution that utilizes AES-CCMP encryption for data protection. WPA2 is a significant upgrade over WEP and provides robust security features like robust key management and advanced encryption algorithms.

A secure method for authenticating devices on a network, involving three components: authentication, authorization, and accounting. EAP-TTLS is a protocol that provides flexible authentication methods, often used for securing network access with certificates or passwords.

EAPv0/MS-CHAPv2 is a widely used authentication protocol for secure network access, often employed with 802.1X to authenticate devices with user credentials. It utilizes a challenge-response mechanism for verification, offering a secure method for network access.

A security policy document should outline procedures for detecting and mitigating rogue access points. This could involve scanning for unauthorized radio signals, enforcing network segmentation, or utilizing a Wireless Intrusion Prevention System (WIPS) to proactively identify and respond to threats.

WPA2-Enterprise provides a strong authentication mechanism with robust security features using 802.1x and EAP protocols. It leverages mutual authentication, ensuring both client and server identities are verified, and offers encryption through AES.

Hiding the SSID (network name) can make it harder for attackers to identify and connect to legitimate access points. However, this alone isn't a foolproof method as attackers can still attempt to discover the SSID using other techniques.

Using a spectrum analyzer allows wireless security professionals to actively scan the radio frequency spectrum for rogue AP signals, giving them a clear view of unauthorized transmissions.

WIPS (Wireless Intrusion Prevention System) is dedicated to detecting and responding to malicious activity on the wireless network. It can identify rogue APs, monitor traffic patterns, and automatically take actions like blocking connections.

Port security on network switches restricts which devices can connect to specific ports. Enabling port security with a limited number of MAC addresses can help prevent unauthorized access by limiting the number of devices that can connect to a single port.

Before establishing a WLAN security policy, it's crucial to secure management support. This support ensures resources, authority, and commitment from leadership to implement and enforce the policy effectively.

Peer-to-peer traffic blocking restricts direct communication between devices on the network. It's particularly useful in public hotspots where you want to prevent unauthorized data sharing or malware propagation.

A wireless security protocol that provides mutual authentication without relying on X.509 certificates for identity verification.

A security protocol that encrypts wireless communication using a pre-shared key (PSK) and provides basic security for home and small business networks.

A standard that dictates how wireless access points (APs) and stations communicate and authenticate with each other.

A security solution that encrypts data transmitted between devices on a network, providing privacy and confidentiality.

A technology used to extend voice calls over the internet via a wireless network; it is usually employed in enterprise settings for VoIP phone calls.

A technology that enables seamless roaming between wireless access points (APs) without interrupting connectivity.

A security mechanism that uses multiple authentication factors to improve security and reduce the risk of unauthorized access.

Restricting network access to only the internet, preventing access corporate resources.

Using a separate controller for guest and corporate networks enhances security by isolating traffic and preventing unauthorized access.

Employing a WIPS to disconnect guests attempting to join the corporate network improves security by preventing unauthorized access.

Restricting access to specific data and destinations using ACLs on the guest network enhances security by limiting what guests can access.

Implementing captive portal authentication and VLAN separation for guest and corporate networks enhances security by providing user control and isolation.

The 4-Way Handshake, a part of the WPA2/3 authentication process, must be completed before a device is granted network access.

Opportunistic Key Caching (OKC) enables faster network roaming by pre-caching keys, but initial problems made it less widely adopted.

Initial problems with OKC included lack of standardization and client support, as well as limited processing power for encryption on older devices.

EAP-TTLS (Tunneled TLS) does not require an authentication server, but EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) does.

The WLAN controller receives a group attribute from the RADIUS server during each successful user authentication. This attribute determines which security profile the user is assigned, based on their group membership.

The Pairwise Transient Key (PTK) is used to encrypt unicast data frames that are transmitted over the wireless medium. It is important for ensuring secure communication between the wireless client and the access point.

The WLAN controller is responsible for assigning security profiles based on user group membership. It receives authentication information from the RADIUS server, including the user's group attribute. Each group is associated with a specific security profile.

WPA2-Enterprise security uses a RADIUS server to authenticate users and assign them to specific groups. This allows for fine-grained access control and security based on user roles.

In IEEE 802.11, the Pairwise Master Key (PMK) is used for establishing secure communication between a client and an access point. It is derived from the user's credentials and the network's security settings.

CCMP, or Counter Mode with CBC-MAC Protocol, is the encryption method used in the 802.11i standard, which is the foundation for WPA2. It is more secure than older methods like WEP and RC4.

WIPS (Wireless Intrusion Prevention System) is a security system designed to identify, locate and if possible, prevent wireless security threats within a wireless network. Typical WIPS threats include rogue access points, rogue stations, unauthorized network access, DoS attacks, unauthorized roaming, malicious traffic and more.

A WIPS termination policy defines the actions taken by a WIPS system when it detects potential threats. This policy can include sending alerts to administrators, blocking suspicious traffic, or isolating devices believed to be malicious.

Rogue Access Point (RAP) is an unauthorized access point that connects to a wireless network without the knowledge or consent of the network administrator. It can pose a serious security risk by allowing unauthorized access to the network, creating possible unauthorized access for attackers.

Rogue Stations are client devices that connect to a wireless network without proper authorization from the network administrator. They can be used to launch attacks, steal data, and disrupt network traffic. A WIPS system can help to identify and isolate rogue stations.

In the context of wireless security, a DoS (Denial of Service) attack aims to disrupt the availability of a wireless network by overwhelming it with traffic, making it difficult or impossible for authorized users to connect and access resources.

Unauthorized roaming within a WIPS context refers to a device's attempt to connect to an access point it isn't authorized to use. This can be a security risk because it allows unauthorized access to the network and potentially allows malicious devices to gain access.

The Time Difference Of Arrival (TDoA) technique is used to determine the location of a device by measuring the time it takes for a signal to reach multiple sensors. By calculating the time difference, the system can triangulate the location of the device emitting the signal.

Trilateration uses the strength of a signal received by multiple sensors to estimate the location of a device. By measuring the Received Signal Strength Indicator (RSSI) and triangulating the measurements, the system can determine the device's location.