6

Question 1

What encryption mode does CCMP use?

Answer 1

WPA2

Question 1

What encryption mode does TKIP use?

Answer 1

WPA

Question 2

What is the process of personal authentication?
1.
2.
3.
4.

Answer 2

A PMK is created by creating a PSK(passphrase) combining that with the clients SSID. Then putting that values through a SHA-1 hash 4096 times, thus creating a PMK

The master key is then created by adding the Client and AP’s MAC

Starting the 4-way handshake, The server sends the ANONCE sending tit too the client, Client creates a SONCE sending it and both adding both values to the PMK creating the PK which is used to encrupt and decrypt unicast traffic.

Both sending a GTK as the final step

Question 3

What are the characteristics of a personal authentication?

Answer 3

vulnerable to dictionary attacks
if key is found can decrypt all traffic for 1 user during that one session
AUTH:PSK

Question 4

What is the process of enterprise

Answer 4

1. 802.1X EAP is sent as PMK
2. 4 way handshake
   pmk+ClientMAC+APMAC
   pmk+ClientMAC+APMAC+AONCE(SERVER)
   pmk+ClientMAC+APMAC+AONCE(SERVER)+SONCE(CLIENT
   = PK (decrypts/encrypts all traffic)
   GTK >

Question 5

What are the characteristics of a Enterprise authentication?

Answer 5

Auth MGT
Not vulnerable too dictionary attacks
if key is found can decrypt all traffic for 1 user during that one session

Question 6

What are the characteristics of WPA3

Answer 6

• Stronger/More Secure connection (SAE)
• Stronger Encryption (GCMP-256G)
  -802.11w mandatory (PMF)

Question 7

What are the characteristics of Dragonfly Key Exchange?

Answer 7

Same as SAE
Uses ECC to create PMK
Creates a Passkey too be used to join the network
Not vulnerable to dictionary attacks

Question 8

What is the vulnerability of WPA3, and the attack used too exploit it?

Answer 8

Transitional mode: backwards compatibility for WPA2 bringing its vulnerabilities

Dragon blood attack: a Downgrade attack to WPA2

Question 9

_____________ provides eavesdropping protection for an open and public WPA3 network

If no ___________ is assigned it is vulnerable to Man in the middle attacks

Answer 9

Wifi certified enhanced open

passphrase