Security Plus Chapter 5

Front 1

What is:


802.11x

Back 1

A family of protocols that provides for wireless communications using radio frequency transmissions. It uses the 2.4 GHz and 5GHz frequency spectrum.

Front 2

What is:


802.11

Back 2

A standard that defines wireless LANs transmitting at 1Mbps or 2Mbps bandwidth using the 2.4 GHz frequency.

Front 3

What is:


802.11a

Back 3

A standard that provides wireless LAN bandwidth of up to 54 Mbps in the 5 GHZ frequency.

Front 4

What is:


802.11b

Back 4

A standard that provides wireless bandwidth of up to 11 Mbps (with fallback rates of 5.5, 2, and 1 Mbps) on the 2.4 GHz frequency. It is also called Wi–Fi or 802.11 high rate.

Front 5

What is:



802.11g

Back 5

A standard that provides for bandwidths of up to 54 Mbps in the 2.4 GHz frequency. Though able to obtain faster speeds, it suffers from the same interference problem of having to are the spectrum with other devices using that frequency.

Front 6

What is:


802.11i

Back 6

A standard that provides for security enhancements to the wireless standard with particular focus on authentication. Often referenced as WPA2.

Front 7

What is:


802.11n

Back 7

The most popular standard. It operates in both the 5 and 2.4 GHz ranges. Speeds can reach 600 Mbps. It offers higher speed and a frequency that does not have as much interference.

Front 8

What is:


Wired Equivalent Privacy (WEP)

Back 8

A wireless protocol designed to provide a privacy equivalent to that of a wired network. Vulnerable because of a weak IV of only 24–Bits.

Front 9

What is an:



Initialization vector (IV)

Back 9

An arbitrary number that can be used along with a secret key for data encryption

Front 10

What is the:


Temporal Key Integrity Protocol (TKIP)

Back 10

A 128–bit wrapper around WEP encryption with a key that is based on things such as the MAC address of the destination device and the serial number of the packet.

Front 11

What is the:


Wireless Application Protocol (WAP)

Back 11

A technology designed for use with wireless devices. It has become a data transmission standard. Uses a smaller version of HTML called WML. Uses a WAP gateway system to convert information from WAP to HTTP and back.

Front 12

What is the:


Wireless Markup Language (WML)

Back 12

A smaller version of HTML, it is used for internet displays over wireless.

Front 13

What is:


Wi–Fi Protected Access (WPA)

Back 13

A technology that was designed to address the core problems of WEP. It implements most, but not all, of 802.11i for backwards compatibility. It also uses TKIP.

Front 14

What is:


Wi–Fi Protected Access 2 (WPA2)

Back 14

A technology that was designed to address the core problems of WEP. It implements the full 802.11i standard and is not compatible with older devices. It also uses CCMP.

Front 15

What is the :


Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (A.k.a. Counter Mode CBC–MAC Protocol or CCMP)

Back 15

An encryption protocol that uses a 128–bit AES encryption with a 48–bit IV.

Front 16

What is:

Wireless Transport Layer Security (WTLS)

Back 16

The security layer of WAP. It provides authentication, encryption, and data integrity for wireless devices.

Front 17

What are:


The 3 levels of security that exist in WAP

Back 17

Anonymous Authentication – Virtually anyone can connect.
Server Authentication – Requires the workstation to authenticate against the server.
Two–Way Authentication – Requires both the client and server to authenticate.

Front 18

What is the:


Wireless Session Protocol (WSP)

Back 18

Manages the session information and connection between the devices.

Front 19

What is the:


Wireless Transaction Protocol (WTP)

Back 19

Provides services similar to TCP and UDP for WAP.

Front 20

What is the:

Wireless Datagram Protocol (WDP)

Back 20

Provides the common interface between devices.

Front 21

What is a:


(Wireless) Access Point (AP)

Back 21

A low power transmitter/receiver which is strategically placed for access.d

Front 22

What is a:

Captive portal

Back 22

Requires that users agree to some condition before they use the Wi–Fi hotspot.

Front 23

What is the:


Extensible Authentication Protocol (EAP)

Back 23

Provides a framework for authentication that is often used with wireless network.

Front 24

What are:


The 5 EAP types adopted by the WPA/WPA2 standard

Back 24

EAP–TLS
EAP–PSK
EAP–MD5
LEAP
PEAP

Front 25

What is:


Extensible Authentication Protocol Tunneled Transport Layer Security (EAP–TTLS)

Back 25

Adds one more layer of security against man–in–the–middles attacks and eavesdropping by adding tunneling.

Front 26

What is:


Wi–Fi Protected Setup (WPS)

Back 26

Used to simplify network setup, it often requires users to do something in order to complete enrollment (i.e. press a button on the router, enter a PIN, etc). The technology is susceptible to brute–force attacks.

Front 27

What is the:


Lightweight Extensible Authentication Protocol (LEAP)

Back 27

Created by Cisco as an extension to EPA. It is being phased out as it is a proprietary protocol to Cisco and lacks native Windows support. LEAP requires mutual authentication, but is susceptible to dictionary attacks.

Front 28

What is the:


Protected Extensible Authentication Protocol (PEAP)

Back 28

Replaces LEAP and has native support for Windows. It is more secure than EAP–TTLS as it establishes an encrypted channel between the client and server.

Front 29

What is a:


Site Survey

Back 29

Used by admins to determine if a proposed location is free of interference. When used by an attacker a site survey can determine what types of systems are in use, the protocols used, and other critical information about a network.

Front 30

What is:

Jamming

Back 30

Intentional interference meant to jam a signal and keep legitimate devices from communicating.

Front 31

Define:


War Driving

Back 31

Driving around, with a wireless device, looking for APs to communicate with.

Front 32

Define:

War Chalking

Back 32

A way to notify others that a wireless vulnerability exists here. Can be on the sidewalk, the side of the building, etc.

Front 33

What is a:


Rogue Access Point

Back 33

Any wireless access point added to the network that is not authorized.

Front 34

What is an:


Evil Twin Attack

Back 34

An attack in which a rouge access point poses as a legitimate wireless access point in the hopes of intercepting information that users transmit.

Front 35

What is:


Bluejacking

Back 35

The sending of unsolicited messages over a Bluetooth connection (spam).

Front 36

What is:


Bluesnarfing

Back 36

The gaining of unauthorized access through a bluetooth connection.