Wireless

Question 1

When assigned or searching for a new target, analysts will source as much intel as possible from all available databases and sources

Answer 1

Initial Intel Dump

Question 2

determined by the criteria for each particular mission but is narrowed down to one of the following

Answer 2

Target nomination

Question 3

Collect as able to maintain target awareness

Answer 3

Continue Collection

Question 4

Active & Passive operations to gain access

Answer 4

Conduct CNE

Question 5

Disruptive attacks that can alert the target

Answer 5

Conduct CNA

Question 6

inal part of the Find/Fix/Finish picture. POL efforts must be used to ensure time/location when units conduct

Answer 6

Kill/Capture

Question 7

Places attacker in the flow of communications with the ability to view, modify, or drop frames in real-time

Answer 7

MitM Attack

Question 8

is a tool kit that allows attackers to set up rogue APs by monitoring for Probe Requests, a KARMA-based rogue AP replies back immediately.

Answer 8

KARMA

Question 9

Involves an attacker disguising himself as an application by altering packet headers in an IP address.

Answer 9

IP Spoofing

Question 10

process of linking an attackers MAC address with the IP address of a legitimate user on a local area network using fake ARP messages.

Answer 10

ARP Spoofing

Question 11

also known as DNS cache poisoning, involves infiltrating a DNS server and altering a websites address record.

Answer 11

DNS Spoofing

Question 12

designed to DENY, DEGRADE, DISRUPT, or DESTROY a targets ability to transmit data on a network.

Answer 12

CNA operations

Question 13

aims to limit or totally block the availability of network resources.

Answer 13

denial of service (DoS)

Question 14

exploits the RTS/CTS protocol in 802.11 by either sending spoofed CTS frames OR an sending repeated RTS frames to an AP forcing the AP to send CTS commands.

Answer 14

CTS Attack

Question 15

pushes deauthentication frames as broadcast or unicast to cause clients to attempt to re-authenticate/re-associate with their AP.

Answer 15

Deauthentication attack

Question 16

intentional use of RF energy to deny or degrade wireless communication.

Answer 16

Jamming

Question 17

Taking multiple LOBs from different directions/angles creates a what’s known as a

Answer 17

fix

Question 18

far more accurate and better refined than DF LOBs and Fixes alone.

use algorithms to compute a location of the emitter, usually expressed in 10 digit MGRS.

Answer 18

Geo-location