WPA2 and WPA3, evil twin, rogue AP, Bluetooth attacks, MDM, app sandboxing, jailbreaking and mobile threat models.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What encryption algorithm does WPA2 use for protecting wireless traffic?
Show answer
CCMP (Counter Mode with CBC-MAC Protocol), which uses AES encryption- What authentication method does WPA3 introduce to replace PSK?
Show answer
SAE (Simultaneous Authentication of Equals), a password-authenticated key exchange protocol- What does WPA3's OWE feature provide?
Show answer
Opportunistic Wireless Encryption, which encrypts traffic on open networks without a password- What is KRACK and what protocol does it target?
Show answer
Key Reinstallation Attack, a vulnerability in the WPA2 four-way handshake that allows key recovery- What is the primary purpose of the four-way handshake in WPA2?
Show answer
To authenticate the client to the access point and derive session encryption keys- What is a Pre-Shared Key (PSK) in WPA2?
Show answer
A password known by both the client and access point, used to derive the encryption keys- What is WPA2 Personal mode used for?
Show answer
Small networks where all users share a single PSK, such as home or small office networks- What is WPA2 Enterprise mode and when is it used?
Show answer
Uses RADIUS authentication server instead of a single PSK, required for large organizations- What is an evil twin attack?
Show answer
A rogue access point that mimics a legitimate WiFi network's SSID to trick users into connecting- How does an attacker set up an evil twin attack?
Show answer
By broadcasting a fake SSID matching a legitimate network and accepting client connections- What defense can prevent evil twin attacks by validating the server?
Show answer
Certificate pinning, which verifies the server certificate matches an expected value- How can a user detect an evil twin attack?
Show answer
Look for unexpected WiFi networks, check for valid certificates, verify the network with the provider- What is a rogue access point?
Show answer
An unauthorized wireless access point placed on a network to intercept traffic- What is the key difference between a rogue AP and an evil twin?
Show answer
Rogue AP is any unauthorized AP on the network, evil twin specifically mimics a legitimate SSID- What attacks are possible when a rogue AP connects to a corporate network?
Show answer
Man-in-the-middle, credential harvesting, malware distribution, lateral movement to internal systems
FlashKeepers