Hacking Wireless Networks Quiz

Q1. Within the Aircrack-ng suite, airodump-ng is the component that:

Cracks the passphrase Injects deauthentication frames Captures raw frames and logs nearby networks and clients Configures the adapter

Q2. WPA2-PSK is attacked offline by capturing:

The SSID The four-way handshake The MAC address The beacon frame

Q3. Guest wireless should be:

Isolated from internal networks with client isolation enabled On the same VLAN for simplicity Left open with no limits Bridged to the server VLAN

Q4. A rogue access point on a corporate network is dangerous because it:

Uses too much power Slows the switch Creates an unmonitored bridge past the perimeter controls Breaks DHCP

Q5. The KRACK attack targeted:

Key reinstallation in the WPA2 four-way handshake SAE in WPA3 The WPS PIN WEP IVs

Q6. A PMKID attack is significant because it can obtain crackable material:

Only on WEP Only with a client present Only from the access point during a handshake From a single frame, without any client connected

Q7. Monitor mode differs from promiscuous mode because it:

Requires WPA3 Needs an IP address Only sees your own traffic Captures raw 802.11 frames without associating to any network

Q8. RFID and NFC badge cloning is possible because many credentials:

Require a PIN Rotate keys Transmit a static identifier with no authentication Use strong encryption

Q9. Which Wi-Fi security standard is considered broken and insecure?

WPA3 WPA2-Enterprise WEP WPA2-AES

Q10. An evil twin against WPA2-Enterprise typically aims to:

Jam the network Capture credentials by presenting a fake RADIUS endpoint Change the SSID Crack AES

Q11. Enterprise wireless clients should be configured to:

Validate the RADIUS server certificate against a specific trusted authority Disable certificate checks for convenience Use WEP as a fallback Connect to any matching SSID

Q12. The strongest realistic wireless posture for an organisation is:

WPA3-Enterprise or WPA2-Enterprise with certificate validation and segmentation Hidden SSID with MAC filtering WPA2-PSK shared with all staff Open network with a portal

Q13. A karma attack exploits the fact that clients:

Cache DNS Use static IPs Support WPA3 Probe for and connect to remembered network names

Q14. Wireless jamming is best described as:

A denial-of-service attack on the radio medium A cracking technique A recon method An encryption bypass

Q15. A wireless site survey during a pentest helps identify:

Database schemas Server patch levels Firewall rules Coverage spill outside the building and rogue devices