Active Exploitation

Question 1

What device/devices does a de-authentication attack target?

• Client
• Access Point
• Both of the above
• None of the above

Answer 1

Both of the above

Question 2

Which two of the following are goals an attacker might have when conducting a de-authentication attack?

Answer 2

1. Forcing the target to flush it’s ARP cache and send an ARP request
2. Causing the target to connect to an Access Point controlled by the attacker

Question 3

WEP is inherently more secure than WPA due to it’s usage of a static key

Answer 3

False

Question 4

What encryption standard was adopted by WPA/WPA2 as an improvement over the previous standard?

Answer 4

Actively gather initialization vectors (IVs)

Question 5

What encryption standard was adopted by WPA/WPA2 as an improvement over the previous standard?

Answer 5

AES

Question 6

TKIP ( Temporal Key Integrity Protocol) prevents replay attacks by implementing a sequence counter.

Answer 6

True

Question 7

What encryption standard was adopted by WPA/WPA2 as an improvement over the previous standard?

Answer 7

AES

Question 8

When using WPA-PSK, since the encryption strength is constant, password complexity provides no benefit.

Answer 8

False