Victor wants to use Wireless Zero Configuration (WZC) to establish a wireless network connection using his computer running on Windows XP operating system. Which of the following are the most likely…

Ping Flood DoS attacks are a general network-layer attack unrelated to the WZC service specifically - they can be launched against any networked host regardless of how the wireless connection is managed.

WZC automatically connects to the wireless network with the strongest signal without verifying the network's authenticity, so an attacker can deploy a rogue access point with a high-power antenna broadcasting a known SSID to lure Victor's computer into connecting to it. This evil twin scenario allows the attacker to intercept all wireless traffic transparently. WZC's automatic connection behavior makes this attack particularly straightforward to execute.

WZC continuously broadcasts probe request frames to discover previously connected networks, and these frames contain the SSIDs of known networks in plaintext. A wireless packet analyzer can passively capture these probes, revealing the names of networks Victor has previously joined, which can then be used to craft targeted rogue access point attacks.

WZC does support configuration of WEP encryption and can interoperate with MAC filtering at the access point level, so the claim that it does not allow encryption configuration is factually incorrect.