Chapter 7 – Understanding Wireless Security
TRUE/FALSE
1. Wireless networks are essentially the same as wired networks when it comes to the security threats
each faces.
2. A RTS frame is the first step of the two-way handshake before sending a data frame.
3. Wireless networks use the CSMA/CD media access method.
4. Wireless networks are inherently secure because the original IEEE 802.11 standard addressed strong
authentication and encryption.
5. SNMP requires the installation of an SNMP agent on the device you want to monitor.
MULTIPLE CHOICE
1. Which layer does wireless communication rely heavily upon?
a.
MAC sublayer of the Network layer
c.
LLC sublayer of the Data Link layer
b.
MAC sublayer of the Data Link layer
d.
LLC sublayer of the Transport layer
2. Which of the following is performed by the MAC sublayer?
a.
joining the wireless network
c.
resolving names to IP addresses
b.
resolving IP address to MAC address
d.
determining best path
3. Which of the following is NOT part of a wireless MAC frame?
a.
802.11 protocol version
c.
FCS
b.
source MAC address
d.
TTL
4. Which management frame type is sent by a station wanting to terminate the connection?
a.
Deauthentication
c.
Reassociation request
b.
Disassociation
d.
Probe response
5. Which type of frame advertises services or information on a wireless network?
a.
Probe request
c.
Beacon
b.
Association response
d.
Probe response
6. Which type of control frame does a station send to let the AP know is can transmit buffered frames?
a.
CTS
c.
RTS
b.
ACK
d.
PS-Poll
7. Which of the following is NOT a field in a control frame?
a.
Duration
c.
Frame control
b.
Sequence control
d.
Frame check sequence
8. Which of the following is true about the SSID?
a.
they can be Null
c.
they are not found in beacon frames
b.
they are registered
d.
they are found in control frames
9. What is a WNIC’s equivalent of a NIC’s promiscuous mode?
a.
active scan mode
c.
passive attack mode
b.
RF monitor mode
d.
auto-capture mode
10. In which type of wireless attack does the attacker cause valid users to lose their connections by
sending a forged deauthentication frame to their stations?
a.
association flood
c.
session hijacking
b.
jamming
d.
MAC address spoofing
11. Which of the following is true about wardriving?
a.
attackers use RF monitor mode
c.
the software is very expensive
b.
the hardware is very expensive
d.
their goal is simply to hijack a connection
12. In which type of attack do attackers intercept the transmissions of two communicating nodes without
the user’s knowledge?
a.
rogue device
c.
man-in-the-middle
b.
wardriver
d.
brute force
13. Which of the following is true about the association process?
a.
it is a three-step process
c.
a station first send an association request
b.
a station first listens for beacons
d.
the AP transmits an invitation to associate
14. What function does a RADIUS server provide to a wireless network?
a.
association
c.
decryption
b.
encryption
d.
authentication
15. What is considered to be one of the biggest weaknesses of WEP?
a.
24-bit initialization vector
c.
128-bit key
b.
RC4 encryption
d.
Kerberos authentication
16. Which of the following is true about MAC addresses in a wireless network?
a.
MAC address filtering will stop a
determined attacker
c.
you need to configure the MAC address
before you use the WNIC
b.
MAC addresses are Network layer
identities
d.
you can change a WNICs MAC address
with software
17. Which of the following is NOT a suggested practice before using a newly configured wireless
network?
a.
change the administrator password
c.
use the default encryption method
b.
change the manufacturer’s default key
d.
alter the default channel
18. Which EAP protocol requires digital certificates to validate supplicants?
a.
EAP-TLS
c.
LEAP
b.
EAP-TTLS
d.
FAST
19. Which of the following is true about IEEE 802.11i?
a.
it uses WEP2 for authentication and
encryption
c.
temporal key integrity protocol is used for
encryption
b.
it uses a symmetric block cipher for
encryption
d.
it uses PMK to generate data encryption
keys
20. Which popular wireless sniffer is an IDS that is passive and undetectable in operation?
a.
Kismet
c.
AirSnort
b.
NetStumbler
d.
Aircrack-ng
COMPLETION
1. Each access point has a(n) ______________ that essentially functions as the name of the network.
2. A ____________ response is sent by a station in response to a request frame and indicates capabilities,
supported data rates, and other information.
3. A _____________ device is a wireless device that employees connect and use without authorization or
verified configurations.
4. ___________ key encryption in WEP uses the RC4 encryption algorithm.
5. MIBs gather data and report it to a(n) ____________________ management station.
MATCHING
a.
active attacks
f.
request to send
b.
association
g.
site survey
c.
clear to send
h.
sniffing
d.
pairwise keys
i.
TKIP
e.
penetration testing
j.
WPA2
1. any keys used between a pair of devices in TKIP
2. an in-depth examination of a proposed wireless network site
3. the process of using a variety of tools and techniques to attempt to break into a network
4. a two-step process of being accepted into a wireless network
5. a type of control frame that a station sends when it wants to transmit
6. an encryption method devised as a replacement for WEP in WPA
7. attacks that attempt to gather information for subsequent attacks by sending probe request frames on
each available channel
8. a type of control frame that gives a station clearance to begin transmitting packets
9. the encryption and authentication architecture based on the final ratified IEEE 802.11i standard
10. capturing network traffic during transmission
SHORT ANSWER
1. How is wireless security different than wired security?
2. List the three types of MAC frames defined by the 802.11 standard.
3. List the four most common types of control frames.
4. List and define the fields in a control frame.
5. Describe forged deauthentication.
6. What are the two authentication methods provided by early 802.11 standards?
7. What is the purpose of MAC address filtering and how can attackers defeat it?
8. List four issues that a wireless security policy should address.
9. What is a site survey and why should you conduct one?
10. Describe 802.1x authentication.