Examkin

Soru

Zorluk: KolayNetwork and Wireless Attack Indicators

A network administrator inspecting wireless event logs discovers that multiple client devices are repeatedly and abruptly losing connectivity to the enterprise access point. The logs reveal a flood of unencrypted 802.11 management packets sent with the MAC address of the access point, instructing the clients to immediately terminate their session. Which of the following wireless attack types is indicated by these log entries?

  1. Deauthentication attackCevap
  2. B
    RF jamming attack
  3. C
    ARP poisoning attack
  4. D
    Bluejacking attack

Cevap

Deauthentication attack
The correct answer is the deauthentication attack. In 802.11 wireless networks, deauthentication frames are management packets sent to notify a client station that its connection to an access point has been terminated. Because standard 802.11 management frames are unauthenticated and sent in cleartext, an attacker can spoof the source MAC address of the legitimate access point and broadcast continuous deauthentication frames, causing target client devices to lose their Wi-Fi connection.

Adım Adım Çözüm

1
Analyze the log indicators provided in the scenario.
The logs show a high volume of unencrypted 802.11 management packets commanding client devices to drop their connections.
Legacy 802.11 management frames are unauthenticated, allowing an attacker to spoof the access point's MAC address.
2
Correlate the packet indicators with the corresponding attack classification.
Broadcasting malicious management frames to force client disconnection defines a deauthentication attack.
Attackers leverage deauthentication frames to perform denial-of-service or to force clients to reconnect to an Evil Twin access point.

Anahtar Kavram

Wireless Deauthentication Attack Indicators
Bu soruyu puanla

Konular

Network and Wireless Attack Indicators

Bu konudan daha fazla soru