Volume 2 - Chapter 3: Securing Wireless Networks Flashcards
Describe the function of a Message Integrity Check (MIC)
Similar to a frame’s FCS.
When an AP receives a frame it compares the MIC inside the frame to what it thinks the MIC should be. If they match, then the data has not be tampered with.
What wireless authentication standard matches the following?:
- Uses an RC4 Ciper Algorithm
- Supports a key of 40 to 104 bits
Wired Equivilent Privacy (WEP).
What year was WEP defined, and in what IEEE standard?
The original 802.11 standard in 1999.
What wireless authentication standard allows the use of multiple authentication methods?
Extensible Authentication Procotol (EAP)
In regards to 802.1X, describe the function of the supplicant.
The supplicant represents the client that is requesting network access.
In regards to 802.1X, describe the function of the authenticator.
The authenticator is the device that is providing access to the network
For wireless, typically a WLC
For wired, typically a switch
In regards to 802.1X, describe the function of the authentication server.
The device that contains the network credentials and will determine network access for the supplicant based on its policies or user database.
What wireless authentication standard matches the following?:
- Developed by Cisco
- Created as a replacement for WEP
- Uses dynamic encryption keys that change frequently
Lightweight EAP (LEAP)
What wireless authentication standard matches the following?:
- Protects credentials using a PAC
- Negotiates a TLS tunnel to securely authenticate the end user
- Requires the use of a RADIUS server
EAP Flexsible Authenticate by Secure Tunneling
(EAP-FAST)
What wireless authentication standard matches the following?:
- A certificate presented by the AS to authenticate to the supplicant
- Negotiates a TLS tunnel to securely authenticate the end user
- Requires the use of a RADIUS server
Protected EAP (PEAP)
What client authentication methods are available when using PEAP?
MSCHAPv2 (Microsoft Challenge Authentication Protocol version 2)
GTC (Generic Token Card) - Physical hardware token
What wireless authentication standard matches the following?:
- A certificate presented by the supplicant to authenticate to the AS
- Negotiates a TLS tunnel to securely authenticate the end user
- Requires the use Public Key Infrastructure (PKI)
EAP Transport Layer Security
(EAP-TLS).
Describe how certificates differ in regards to PEAP versus EAP-TLS.
With PEAP, the certificate present on the AS is used to authenticate to the supplicant. The suppliant uses other methods to authenticate the AS.
With EAP-TLS, the suppliant is also required to have a valid signed certificate to authenticate.
What are the 3 main wireless privacy/integrity methods?
Temporal Key Integrity Protocol (TKIP)
Counter/CBC-MAC Protocol (CCMP)
Galios/Counter Mode Protocol (GCMP)
What wireless privacy/integrity algorithm was developed to improve the security of the WEP authentication protocol?
Temporal Key Integrity Protocol (TKIP).
What are the two algorithms used by CCMP?
AES Counter Mode Encryption
Cipher Block Chaining Message Authentication Code (CBC-MAC)
How can you tell if a device uses CCMP for its privacy/integrity method?
The device will support WPA2
What are the two algorithms used by GCMP?
AES Counter Mode Encryption
Galios Message Authentication Code (GMAC)
How can you tell if a device uses GCMP for its privacy/integrity method?
The device will support WPA3
What organization provides industry certifications for wireless security?
The Wi-Fi Alliance.
What are the 3 certifications currently offered by the Wi-Fi alliance?
WPA
WPA2
WPA3
Describe the function of Protected Managment Frames (PMF) in regards to WPA3
WPA3 supports PMF to secure frames between the AP and clients for management functions.
This prevents tampering with the operation of the BSS.
Which Wi-Fi Alliance certification(s) allow authentication using pre-shared keys?
WPA, WPA2, & WPA3
Which Wi-Fi Alliance certification(s) allow authentication using 802.1X?
WPA, WPA2, & WPA3
Which Wi-Fi Alliance certification(s) support encryption and MIC using TKIP?
Only WPA
Which Wi-Fi Alliance certification(s) support encryption and MIC using AES and CCMP?
WPA and WPA2
Which Wi-Fi Alliance certification(s) support encryption and MIC using AES and GCMP?
Only WPA3
