What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

• A.Deauthentication flood
• B.Eavesdropping
• C.MAC Spoofing
• D.Soft AP
• E.EAP flood
• F.Hotspotter

Comment: *

Name: *

Email: *

Verification: *

In XYZ's small business, two autonomous 802.11ac APs and 12 client devices are in use with WPA2-Personal. What statement about the WLAN security of this company is true?

• A.Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.
• B.An unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic.
• C.An unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user's 4-Way Handshake.
• D.A successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client.
• E.Because WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.

Comment: *

Name: *

Email: *

Verification: *

Your company is going to add wireless connectivity to the existing LAN. You have concerns about the security of the wireless access and wish to implement encryption. Which of the following would be the best choice for you to use?

• A.WAP
• B.WEP
• C.PKI
• D.DES

Comment: *

Name: *

Email: *

Verification: *

During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?

• A.The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
• B.4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.
• C.The username can be looked up in a dictionary file that lists common username/password combinations.
• D.The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

Comment: *

Name: *

Email: *

Verification: *

You need to set up a management system on your network.
Which of the following protocols will you use to manage your network?

• A.TCP
• B.HTTP
• C.SNMP
• D.IP

Comment: *

Name: *

Email: *

Verification: *