Question 1

When implementing an interim security model, most vendors have the option of a 128-bit WEP key, which can be created by entering 16 ____ characters. This provides the most secure option.

Accepted Answer

A)   ASCII
B)   ciphered
C)   hexadecimal
D)   plaintext C

Question 2

Describe Advanced Encryption Standard (AES).

Accepted Answer

AES is a block cipher that uses the same key for both encryption and decryption. With AES, bits are encrypted in blocks of plaintext that are calculated independently, rather than a keystream acting across a plaintext data input stream. AES has a block size of 128 bits with three possible key lengths: 128, 192, and 256 bits as specified in the AES standard. For the WPA2/802.11i implementation of AES, a 128-bit key length is used. AES encryption includes four stages that make up one round. Each round is then iterated 10, 12, or 14 times depending upon the bit-key size. For the WPA2/802.11i implementation of AES, each round is iterated 10 times.

Question 3

The personal security model is intended for settings in which a(n) ____ is unavailable.

Accepted Answer

A)   wired network
B)   authentication server
C)   AP
D)   intermediate security model B

Question 4

What is the name of the 128-bit key used in TKIP?

Accepted Answer

A)   temporal key
B)   MIC
C)   XOR
D)   PRNG

Question 5

Describe pre-shared key authentication.

Accepted Answer

The answer of Describe pre-shared key authentication....

Question 6

Describe the Temporal Key Integrity Protocol used by Wi-Fi Protected Access (WPA).

Accepted Answer

The answer of Describe the Temporal Key Integrity Protocol used...

Question 7

In WPA, ________________________________________ encryption replaces WEP's small 40-bit encryption key that must be manually entered on wireless APs and devices and does not change.

Accepted Answer

The answer of In WPA, ________________________________________ encryption replaces WEP's small...

Question 8

____ was designed to address WEP vulnerabilities with a minimum of inconvenience.

Accepted Answer

A)   IEEE 802.11i
B)   TGi
C)   dynamic WEP
D)   WPA

Question 9

The block cipher used in 802.11i is the Data Encryption Standard (DES).

Accepted Answer

A) True 
 B)False

Question 10

WEP2 attempted to overcome the limitations of WEP by adding two new security enhancements.

Accepted Answer

A) True 
 B)False

Question 11

____ authentication is used in the enterprise security model using WPA and WPA2.

Accepted Answer

A)   AES
B)   TKIP
C)   IEEE 802.1x
D)   All of the above

Question 12

A network supporting the 802.1x standard consists of three elements. Identify and describe each one.

Accepted Answer

The answer of A network supporting the 802.1x standard consists...

Question 13

Most consumer access points are in reality wireless ____________________, because they combine the functions of an access point, router, network address translator, firewall, and switch.

Accepted Answer

The answer of Most consumer access points are in reality...

Question 14

In dynamic WEP, the ____ key is changed every time the user roams to a new AP or logs out and logs back in.

Accepted Answer

A)   broadcast
B)   unicast
C)   passphrase
D)   ticket

Question 15

What should a business do if the best possible security model cannot be implemented?

Accepted Answer

The answer of What should a business do if the...

Question 16

The ____ wireless security standard provides a low level of security.

Accepted Answer

A)   Dynamic WEP
B)   WEP
C)   WEP2
D)   All of the above

Question 17

Pre-shared key (PSK) authentication uses a passphrase that is automatically generated to generate the encryption key.

Accepted Answer

A) True 
 B)False

Question 18

At the heart of a WIDS are ____; these devices, which can be either separate hardware devices or a standard access point operating in a special "scan" mode, monitor the airwaves to detect signals from rogue access points.

Accepted Answer

A)   captive portals
B)   VPNs
C)   firewalls
D)   wireless sensors

Question 19

Match between columns
                        Premises: wireless device that requires secure network access
uses a passphrase that is manually entered to generate the encryption key
performs three steps on every block (128 bits) of plaintext
traffic sent to all users on the network
stores information from a device on the network so if a user roams away from an AP and later returns, she does not need to re-enter all of the credentials
encryption protocol in the 802.11i standard
solves the weak IV problem by rotating the keys frequently
robust security network
designed to prevent an attacker from capturing, altering, and resending data packets

Accepted Answer

The Answer of AES-CCMP and pre-shared key authentication and 802.11i is...

Question 20

____ is considered to be the "heart and soul" of WPA security.

Accepted Answer

A)   PSK
B)   IV
C)   MIC
D)   TKIP

Exam 9: Implementing Wireless Lan Security

When implementing an interim security model, most vendors have the option of a 128-bit WEP key, which can be created by entering 16 ____ characters. This provides the most secure option.

Describe Advanced Encryption Standard (AES).

The personal security model is intended for settings in which a(n) ____ is unavailable.

What is the name of the 128-bit key used in TKIP?

Describe pre-shared key authentication.

Describe the Temporal Key Integrity Protocol used by Wi-Fi Protected Access (WPA).

In WPA, ________________________________________ encryption replaces WEP's small 40-bit encryption key that must be manually entered on wireless APs and devices and does not change.

____ was designed to address WEP vulnerabilities with a minimum of inconvenience.

The block cipher used in 802.11i is the Data Encryption Standard (DES).

WEP2 attempted to overcome the limitations of WEP by adding two new security enhancements.

____ authentication is used in the enterprise security model using WPA and WPA2.

A network supporting the 802.1x standard consists of three elements. Identify and describe each one.

Most consumer access points are in reality wireless ____________________, because they combine the functions of an access point, router, network address translator, firewall, and switch.

In dynamic WEP, the ____ key is changed every time the user roams to a new AP or logs out and logs back in.

What should a business do if the best possible security model cannot be implemented?

The ____ wireless security standard provides a low level of security.

Pre-shared key (PSK) authentication uses a passphrase that is automatically generated to generate the encryption key.

At the heart of a WIDS are ____; these devices, which can be either separate hardware devices or a standard access point operating in a special "scan" mode, monitor the airwaves to detect signals from rogue access points.

Match each term with the correct statement below.

____ is considered to be the "heart and soul" of WPA security.