Refer to the exhibit. An engineer must analyze the packet capture from Wireshark. What is occurring?

Question

Options

• Abrute-force attack
• BICMP flood attack
• Cwar driving attack
• DWi-Fi jamming attack

• A
  22% (11)
• B
  6% (3)
• C
  10% (5)
• D
  61% (30)

Explanation

Note: The exhibit isn't visible here, but based on the correct answer and common exam scenarios, the capture likely shows repeated 802.11 deauthentication or disassociation frames being broadcast - the Wireshark signature of a Wi-Fi jamming (deauth flood) attack.

Why D is correct: A Wi-Fi jamming attack disrupts wireless connectivity by flooding the air with deauthentication or disassociation frames, forcing clients off the network. Wireshark captures on a wireless interface would show a massive volume of these 802.11 management frames, often targeting broadcast or multiple clients in rapid succession.

Why the distractors are wrong:

• A (Brute-force): Would appear as repeated authentication/login attempts at Layer 7 (HTTP, SSH, etc.), not 802.11 management frames.
• B (ICMP flood): Would show a high volume of ICMP Echo Request packets at Layer 3 - a wired-style DoS, not wireless disruption.
• C (War driving): Is passive reconnaissance - scanning for SSIDs while driving - and wouldn't generate an attack pattern visible in a capture; it produces normal probe requests/responses.

Memory tip: Think "Jam = Deauth Spam" - Wi-Fi jamming in Wireshark looks like a storm of deauthentication frames kicking clients off repeatedly. If the capture screams 802.11 management frames at high volume, think jamming, not ICMP or brute force.

No community discussion yet for this question.