GSLC · Question #500
Which of the following attacks does Management Frame Protection help to mitigate? Each correct answer represents a complete solution. Choose two.
The correct answer is B. DoS attack D. Man-in-the-middle attack. IEEE 802.11w Management Frame Protection (MFP) cryptographically authenticates 802.11 management frames, directly countering DoS attacks that spoof deauthentication frames and MitM attacks that rely on rogue AP impersonation.
Question
Which of the following attacks does Management Frame Protection help to mitigate? Each correct answer represents a complete solution. Choose two.
Options
- AReplay attack
- BDoS attack
- CDDoS attack
- DMan-in-the-middle attack
How the community answered
(39 responses)- A8% (3)
- B90% (35)
- C3% (1)
Why each option
IEEE 802.11w Management Frame Protection (MFP) cryptographically authenticates 802.11 management frames, directly countering DoS attacks that spoof deauthentication frames and MitM attacks that rely on rogue AP impersonation.
While 802.11w includes a replay counter as a secondary mechanism, replay attack prevention is not a primary design goal of MFP; its core purpose is protecting against spoofed management frame-based DoS and MitM scenarios.
MFP mitigates deauthentication and disassociation flood DoS attacks by requiring cryptographic integrity on management frames, causing clients to reject spoofed frames from attackers who lack the correct keys.
DDoS attacks involve volumetric traffic from many distributed external sources targeting network or transport-layer availability; MFP operates strictly at the 802.11 management frame layer and provides no protection against distributed volumetric flooding.
MFP mitigates man-in-the-middle attacks by authenticating management frames so an attacker cannot impersonate a legitimate access point to redirect client associations through a rogue AP.
Concept tested: IEEE 802.11w Management Frame Protection wireless attack mitigation
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/management_frame_protection.html
Topics
Community Discussion
No community discussion yet for this question.