wireless security settings

Question 1

_____ provides authentication, authorization, and accounting services for wireless clients. Users can use their personal accounts to gain wireless network access.

Answer 1

Remote Authentication Dial-In User Service (RADIUS)

Question 2

_____ is a wireless network port authentication protocol used in IEEE 802.11 Standard to deliver session WEP keys to wireless network users

Answer 2

Extensible Authentication Protocol (EAP) over Wireless (EAPoW)

Question 3

802.1x is configured by selecting the Wi-Fi Protected Access (WPA) setting for _____ or _____ as the security method on the access depending on the wireless router model type.

Answer 3

WPA2-Enterprise or WPA3-Enterprise

Question 4

A _____ is a software tool that can scan for wireless signals in the area.

Answer 4

Wi-Fi analyzer

Question 5

A Remote Access Dial-in User Server (RADIUS) is required to complete the 802.1x setup. The wireless controller connects to the RADIUS server with a _____, then credentials can be properly authenticated.

Answer 5

shared secret key

Question 6

_____, which is the Port-based Network Access Control framework, establishes several ways for devices and users to be securely authenticated before they are permitted full network access. Extensible authentication protocol (EAP) is the actual authentication mechanism.

Answer 6

802.1x

Question 7

_____ is a feature on most consumer wireless routers to assist residential consumers to automate the setup process.

Answer 7

Wi-Fi Protected Setup (WPS)

Question 8

Channels have ~5 MHz spacing, but Wi-Fi requires _____ of channel space.

Answer 8

20 MHz

Question 9

_____ enables a client and server to establish a secure connection without mandating a client-side certificate. The user authentication method (also referred to as the “inner” method) works with the Microsoft Challenge Handshake Protocol (MS-CHAP).

Answer 9

Protected Extensible Authentication Protocol (PEAP)

Question 10

_____ is Cisco Systems’ proprietary EAP implementation. It is vulnerable to password cracking attacks.

Answer 10

Lightweight Extensible Authentication Protocol (LEAP)

Question 11

_____ requires a server and client-side public key certificate. An encrypted TLS tunnel is established between the supplicant and authentication server using this method.

Answer 11

Extensible Authentication Protocol with Transport Layer Security (EAP-TLS)

Question 12

_____ is a secure password-based authentication and key agreement method used in Wireless Protected Access version 3 (WPAv3).

Answer 12

Simultaneous Authentication of Equals (SAE)

Question 13

_____ does not use certificates but a Protected Access Credential (PAC), which is generated for each user from the authentication server’s master key.

Answer 13

EAP with Flexible Authentication via Secure Tunneling (EAP-FAST)

Question 14

_____ is a common security setting for consumer wireless routers that allow users to enter a password to access the wireless network

Answer 14

Pre-shared key (PSK)

Question 15

_____ is a standard encryption algorithm compatible with WPA2.

Answer 15

Advanced Encryption Standard-Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP)

Question 16

_____ is a feature of WPA version 3 that enables encryption for the open authentication method.

Answer 16

Enhanced open

Question 17

Wi-Fi Protected Access version 3 (WPA3) uses _____ that replaces the 4-way handshake protocol with a protocol based on Diffie-Hellman key agreement.

Answer 17

Simultaneous Authentication of Equals (SAE)

Question 18

_____ is an authentication framework that is used in local area networks (LANs) and dial-up connections.

Answer 18

Extensible Authentication Protocol (EAP)

Question 19

_____ is Cisco’s replacement for LEAP. It addresses LEAP vulnerabilities using Transport Layer Security (TLS) with Protected Access Credential (PAC) instead of certificates.

Answer 19

Flexible Authentication via Secure Tunneling (EAP-FAST)

Question 20

_____ uses a server-side public key certificate to create an encrypted tunnel between the supplicant and authentication server. This an industry standard.

Answer 20

Protected Extensible Authentication Protocol (PEAP)