Examkin

Question

Difficulty: EasyNetwork and Wireless Attack Indicators

Match each observed network or wireless attack indicator on the left with its corresponding attack classification on the right.

  • A rogue access point broadcasting the exact SSID of a corporate network to trick users into connectingEvil Twin
  • Excessive radio frequency signal noise causing high packet loss and sudden loss of wireless connectivity across a floorRF Jamming
  • A flood of spoofed 802.11 management frames instructing wireless client devices to disconnect from the networkDeauthentication Attack
  • Unsolicited Layer 2 responses associating the default gateway's IP address with an unauthorized MAC addressARP Poisoning

Answer

Rogue access point mimicking SSID matches Evil Twin; RF signal noise causing connectivity loss matches RF Jamming; Spoofed 802.11 management frames match Deauthentication Attack; Unsolicited Layer 2 responses matching gateway IP to unauthorized MAC matches ARP Poisoning.
Each indicator matches its respective attack mechanism directly: broadcasting a duplicate enterprise SSID represents an Evil Twin; physical RF spectrum noise represents RF Jamming; sending disassociation management packets represents a Deauthentication attack; and distributing forged IP-to-MAC mappings represents ARP Poisoning.

Step-by-Step Solution

1
Analyze each network or wireless attack indicator in the left column.
Identify key characteristics: SSID spoofing, physical radio interference, 802.11 disassociation/deauthentication frames, and unsolicited MAC-to-IP cache updates.
Matching indicators requires recognizing the fundamental technical mechanism associated with each threat.
2
Pair each indicator with its respective threat classification.
Correlate rogue SSID broadcasting to Evil Twin, RF noise to RF Jamming, disconnect frames to Deauthentication, and ARP cache corruption to ARP Poisoning.
Each security threat leaves distinct Layer 1, Layer 2, or Layer 3 artifacts.

Key Concept

Network and Wireless Attack Indicators
Rate this question

Topics

Network and Wireless Attack Indicators

More questions from this topic