You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution. In this configuration, the wireless network is initially susceptible to what type of attack?

1. A. Offline dictionary attacks
2. B. Application eavesdropping
3. C. Session hijacking
4. D. Layer 3 peer-to-peer
5. E. Encryption cracking

Correct Answer: A

A network security auditor is preparing to perform a comprehensive assessment of an 802.11ac network’s security. What task should be performed at the beginning of the audit to maximize the auditor’s ability to expose network vulnerabilities?

1. A. Identify the IP subnet information for each network segment.
2. B. Identify the manufacturer of the wireless infrastructure hardware.
3. C. Identify the skill level of the wireless network security administrator(s).
4. D. Identify the manufacturer of the wireless intrusion prevention system.
5. E. Identify the wireless security solution(s) currently in use.

Correct Answer: E

What WLAN client device behavior is exploited by an attacker during a hijacking attack?

1. A. After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.
2. B. Client drivers scan for and connect to access point in the 2.4 GHz band before scanning the 5 GHz band.
3. C. When the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.
4. D. When the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.
5. E. As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.

Correct Answer: C

The Marketing department’s WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources. What single WLAN security feature should be implemented to comply with these requirements?

1. A. RADIUS policy accounting
2. B. Group authentication
3. C. Role-based access control
4. D. Captive portal
5. E. Mutual authentication

Correct Answer: C

What field in the RSN information element (IE) will indicate whether PSK- or Enterprise-based WPA or WPA2 is in use?

1. A. Group Cipher Suite
2. B. Pairwise Cipher Suite List
3. C. AKM Suite List
4. D. RSN Capabilities

Correct Answer: C