Karteikarten
Chapter 2 - Wireless Security Concerns
Karten in diesem Stapel (20)
- 1What information can an attacker gather from passive discovery?Network capabilities, SSID, Supported Rates, Security type
- 2What type of frame must an attacker capture during passive discovery?Beacon management frame.
- 3What types of frames can be captured during active discoveryProbe Request and Probe Response management frames.
- 4What types of devices can be used as discovery hardware?Any device with a Wi-Fi adapter and appropriate software.
- 5What are some features of discovery software?Listen to management frames such as beacons, probe requests and probe responses, and display the network information for the user.
- 6WLAN security should be considered only as strong as it's (blank).Weakest link.
- 7Why isn't SSID hiding a good security measure?The SSID will still be present in probe requests, probe responses, association requests and reassociation requests.
- 8What are some reasons not to use MAC filtering?Tedious to configure/manage, easily spoofed.
- 9When must Open System Authentication be performed?Every time a STA associates or reassociates to a new AP.
- 10What are two EAP types that are considered weak?EAP-MD5 and LEAP
- 11What mode must a WLAN adapter be put into in order to perform silent eavesdropping?Monitor Mode
- 12What types of RF jamming are there, and what equipment is used for each?Intentional - rf jammers, signal generators, WLAN adapters with special software.
Unintentional - legitimate Wi-Fi devices, accidental rogues, non-wi-fi interference - 13What are some effects of an RF DoS attack?Client forced to roam to rogue AP, network disruption.
- 14Describe a MAC DoS attack.L2, uses deauthentication and disassociation frames to disrupt the WLAN.
- 15What are some characteristics of a Peer-to-peer attack?One client connects directly to another, either ad-hoc or directly through an AP, to steal data or directly access device.
- 16How does a Man in the Middle attack happen?Intruder places unauth'd device between AP and client, and hijacks the client connection. Intruder needs 2 WLAN adapters - 1 as client connecting to legit AP, other posing as legit AP for client to connect to. All data travels through intruder computer.
- 17What are some vulnerable authentication methods?Shared Key Auth, WPA/WPA2 with weak PSKs, LEAP, EAP-MD5, PPTP, PAP, CHAP, MSCHAP, MSCHAPv2.
If these auth methods are cracked, most likely encryption is also cracked. - 18What are best practices to avoid encryption cracking when using WPA/WPA2-Personal?Passphrases should be minimum 20 characters, not dictionary words, and be a mixture of uppercase, lowercase, digits and special characters.
- 19What are some major physical security threats?Physically available APs, unsecured Ethernet ports, unintentional rogues placed by employees.
- 20What types of attacks can happen at open public hotspots?Spam transmission, malware injection, data theft, peer-to-peer attacks, various Internet attacks.
Informationen
- Beschreibung
- CWSP-205 CWSP (Chapter 2 - Wireless Security Concerns) Karteikarten am Chapter 2 - Wireless Security Concerns, erstellt von steve.mckim13 am 02/12/2015.
- Erstellt von
- steve.mckim13
- Aufrufe
- 2
- Bewertung