nerdexam
GIAC

GSEC · Question #388

What type of attack can be performed against a wireless network using the tool Kismet?

The correct answer is B. Eavesdropping. Kismet is a passive wireless network sniffer and detector that captures 802.11 traffic without transmitting, making eavesdropping its primary attack capability.

Network Security

Question

What type of attack can be performed against a wireless network using the tool Kismet?

Options

  • AIP spoofing
  • BEavesdropping
  • CMasquerading
  • DDenial of Service

How the community answered

(38 responses)
  • A
    8% (3)
  • B
    71% (27)
  • C
    5% (2)
  • D
    16% (6)

Why each option

Kismet is a passive wireless network sniffer and detector that captures 802.11 traffic without transmitting, making eavesdropping its primary attack capability.

AIP spoofing

IP spoofing requires crafting and injecting forged packets, which is an active technique incompatible with Kismet's purely passive monitoring architecture.

BEavesdroppingCorrect

Kismet operates by placing the wireless interface into monitor mode and passively capturing all 802.11 frames within range without sending any packets itself. This passive capture of network traffic - including unencrypted data, SSIDs, and management frames - is the definition of eavesdropping. Because it never transmits, Kismet-based eavesdropping is virtually undetectable by the target network.

CMasquerading

Masquerading involves impersonating another device or user identity on the network, which requires active transmissions that Kismet's passive-only design does not support.

DDenial of Service

Denial of Service attacks require sending disruptive traffic to overwhelm a target, an active action that Kismet cannot perform as it only passively listens.

Concept tested: Kismet wireless sniffer passive eavesdropping capability

Source: https://www.kismetwireless.net/docs/readme/kismet/

Topics

#Kismet#wireless eavesdropping#wireless scanning tools#passive monitoring

Community Discussion

No community discussion yet for this question.

Full GSEC Practice