¡GoConqr estrena diseño! Cuéntanos qué te parece.

Regístrate gratis

Test

CEH Chapter 7

Paul Anstall 13 preguntas

Hacer el test

Preguntas del test (13)

  1. 1A WPA2 wireless network is discovered during a pen test. Which of the following methods is the best way to crack the network key?
    1. ACapture the WPA2 authentication traffic and crack the key.
    2. BCapture a large amount of initialization vectors and crack the key inside.
    3. CUse a sniffer to capture the SSID.
    4. DWPA2 cannot be cracked.
  2. 2You are discussing wireless security with your client. He tells you he feels safe with his network because he has turned off SSID broadcasting. Which of the following is a true statement regarding his attempt at security?
    1. AUnauthorized users will not be able to associate because they must know the SSID in order to connect.
    2. BUnauthorized users will not be able to connect because DHCP is tied to SSID broadcast.
    3. CUnauthorized users will still be able to connect because nonbroadcast SSID puts the AP in ad hoc mode.
    4. DUnauthorized users will still be able to connect because the SSID is still sent in all packets, and a sniffer can easily discern the string.
  3. 3You are discussing wireless security with your client. He tells you he feels safe with his network as he has implemented MAC filtering on all access points, allowing only MAC addresses from clients he personally configures in each list. You explain this step will not prevent a determined attacker from connecting to his network. Which of the following explains why the APs are still vulnerable?
    1. AWEP keys are easier to crack when MAC filtering is in place.
    2. BMAC addresses are dynamic and can be sent via DHCP.
    3. CAn attacker could sniff an existing MAC address and spoof it.
    4. DAn attacker could send a MAC flood, effectively turning the AP into a hub.
  4. 4What information is required in order to attempt to crack a WEP AP? (Choose two.)
    1. ANetwork SSID
    2. BMAC address of the AP
    3. CIP address of the AP
    4. DStarting sequence number in the first initialization vector
  5. 5Which of the following protects against man-in-the-middle attacks in WPA?
    1. AMIC
    2. BCCMP
    3. CEAP
    4. DAES
  6. 6 Which of the following is the best choice for performing a bluebugging attack?
    1. APhoneSnoop
    2. BBBProxy
    3. CbtCrawler
    4. DBlooover
  7. 7Operations promotes the use of mobile devices in the enterprise. Security disagrees, noting multiple risks involved in adding mobile devices to the network. Which of the following provides some protections against the risks security is concerned about?
    1. AImplement WPA.
    2. BAdd MAC filtering to all WAPs.
    3. CImplement MDM.
    4. DEnsure all WAPs are from a single vendor.
  8. 8Which of the following provides for integrity in WPA2?
    1. AAES
    2. BCCMP
    3. CTKIP
    4. DRADIUS
  9. 9Which of the following is a true statement?
    1. AConfiguring a strong SSID is a vital step in securing your network.
    2. BAn SSID should always be more than eight characters in length.
    3. CAn SSID should never be a dictionary word or anything easily guessed.
    4. DSSIDs are important for identifying networks but do little to nothing for security.
  10. 10 Which wireless encryption technology makes use of temporal keys?
    1. AWAP
    2. BWPA
    3. CWEP
    4. DEAP

Información

Descripción
Information Technology Test sobre CEH Chapter 7, creado por Paul Anstall el 03/02/2017.
Idioma
English
Visitas
47
Valoración
Aún sin valoraciones
Valora este test
Valora este test

Escríbenos

¿Sobre qué es tu mensaje?

¿Qué te parece el nuevo diseño?

¿Te gusta?