Cwna Chapter 13 802.11 Network Security Architecture

Front 1

What are the two most common algorithms used to protect data?

Back 1

RC4 algorithm and Advanced Encryption Standard (AES)

Front 2

A streaming cipher used in technologies that are often used to protect Internet traffic.

Back 2

RC4 algorithm

Front 3

Originally known as the Rijndael algorithm, it is a block cipher that uses CCMP to encrypt 802.11 wireless data.

Back 3

AES (Advanced Encryption Standard)

Front 4

A computer security concept that defines the protection of network resources.

Back 4

AAA (Authentication, Authorization, and Accounting)

Front 5

The verification of identity and credentials. User must present a username and password

Back 5

Authentication

Front 6

Determines if a device or user has the rights to have access to network resources

Back 6

Authorization

Front 7

Used to keep a historical trail of who used what resource, when, and where it was used. This tracking is known as?

Back 7

Accounting

Front 8

A legacy authentication included in the original 802.11 standard specified what two methods of authentication?

Back 8

Open System Authentication and Shared Key Authentication

Front 9

In an open system authentication what two-way exchange between the client radio and the access point occurs?

Back 9

1. The client radio sends an authentication request.

2. The access point then sends an authentication response.

Front 10

With Shared Key authentication what was added to the open system authentication process to make Shared Key authentication more secure?

Back 10

A challenge and response between the radio cards.

1. Client sends authentication request to the AP

2. The AP sends a cleartext challenge to the client station in an authentication response.

3. The client station encrypts the cleartext challenge and sends it back to the AP.

4. The AP decrypts the response and compares the challenge.

Front 11

A layer 2 encryption method that used the RC4 streaming cipher. Offered a 64-bit and 128-bit encryption.

Back 11

WEP (Wireless Equivalent Privacy)

Front 12

What were the three main goals of WEP (Wireless Equivalent Privacy)?

Back 12

Confidentiality

Access Control

Data Integrity

Front 13

What four main attacks is WEP (Wireless Equivalent Privacy) prone to?

Back 13

IV Collisions Attack

Weak Key Attack

Reinjection Attack

Bit-Flipping Attack

Front 14

MAC filters can be used to deny client associations to an AP.

Why is MAC filtering not considered a reliable means of security for wireless enterprise networks?

Back 14

Because MAC address can be spoofed, or impersonated.

Front 15

In a robust security network (RSN), two stations must authenticate and associated with each other. To do this they create ___________ in a process known as the ____________.

Back 15

Dynamic; 4-way handshake

Front 16

What type of authentication technique is meant to be used in the SOHO environment?

Back 16

PSK authentication (Pre-Shared Key)

Front 17

PSK authentication can be vulnerable to a brute-force attack because why?

Back 17

The passphrase is static leading it to be susceptible to social engineering attacks.

Front 18

This standard is not a wireless standard and it a port based access control standard. Provides an authorization framework that allows or disallows traffic to pass through a port.

Back 18

802.1X

Front 19

What three main components make up the 802.1X framework?

Back 19

Supplicant

Authenticator

Authentication Server (AS)

Front 20

A host with software the request authentication and access to network resources is known as what?

Back 20

Supplicant

Front 21

A device that either blocks or allows traffic to pass through its port entity. This device maintains two virtual ports: an uncontrolled port and a controlled port.

Back 21

Authenticator

Front 22

What validates the credentials of the host. This maintains a user database, such as an LDAP database, to verify user credentials

Back 22

Authentication Server

Front 23

What protocol works with the supplicant, authenticator, and authentication server to provide user authentication?

Back 23

EAP (Extensible Authentication Protocol)

Front 24

In the 4 way handshake what final encryption key is used to encrypt/decrypt unicast traffic?

Back 24

PTK (Pairwise Transient Key)

Front 25

In the 4 way handshake what final encryption key is used to encrypt/decrypt broadcast and multicast traffic?

Back 25

GTK (Group Temporal Key)

Front 26

An enhancement of WEP this method uses the RC4 cipher and was developed to rectify the weaknesses of WEP. Uses a process known as per-packet key mixing.

Back 26

TKIP (Temporal Key Integrity Protocol)

Front 27

WEP encryption adds an extra 8 bytes of overhead to the body of an 802.11 data frame. When TKIP is implemented how many bytes of overhead are added to the body of an 802.11 data frame?

Back 27

20 bytes

Front 28

What default encryption method is defined under the 802.11i amendment?

Back 28

CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol)

Front 29

How many bytes are added to the overhead of the body of an 802.11 data frame when CCMP/AES (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol/Advanced Encryption Standard) is used.

Back 29

16 bytes

Front 30

Most WLAN vendors allow a radio to broadcast how many SSIDs? Even though they can broadcast this amount of SSIDs, what is the best practice for broadcasting them?

Back 30

16 SSIDs can be broadcasted but the best practice is to broadcast only 3 or 4 SSIDs.

40 percent performance reduction could be the result of using 16 SSIDs

Front 31

What are the three main components of a Role-Based Access Control (RBAC)?

Back 31

Users, Roles, and Permissions

Front 32

A network administrator needs a way to control the network resources that can be accessed by employees based on their department. What feature would allow the administrator to accomplish this?

Back 32

RBAC (Role-Based Access Control)

Front 33

The 802.11-2012 standard requires the use of strong, dynamic encryption key generation methods. ________ encryption is the default encryption method, and _______ is an optional encryption method.

Back 33

CCMP/AES; TKIP/RC4

Front 34

What does WPA-Personal use for authentication?

Back 34

preshared key

Front 35

What layer 2 protocol is very flexible, and has many different variations or "flavors"?

Back 35

EAP (Extensible Authentication Protocol)

Front 36

In WLAN security, which authentication method always creates Layer 2 dynamic encryption keys?

Back 36

WPA/WPA2 PSK

Front 37

If a radio is WPA compliant, it most likely only supports what type of encryption method?

Back 37

TKIP/RC4

Front 38

If a radio is WPA2 compliant, it supports what type of dynamic encryption method?

Back 38

CCMP/AES

Front 39

In an 802.1X/EAP process the AP could act as the ________.

Back 39

Authenticator