nerdexam
CompTIA

PT0-001 · Question #52

A penetration tester is reviewing the following output from a wireless sniffer: Which of the following can be extrapolated from the above information?

The correct answer is A. Hardware vendor. Wireless sniffer output includes MAC addresses, and the first three octets identify the hardware vendor via the IEEE Organizationally Unique Identifier registry.

Reconnaissance and enumeration

Question

A penetration tester is reviewing the following output from a wireless sniffer:

Which of the following can be extrapolated from the above information?

Options

  • AHardware vendor
  • BChannel interference
  • CUsernames
  • DKey strength

How the community answered

(52 responses)
  • A
    88% (46)
  • B
    2% (1)
  • C
    8% (4)
  • D
    2% (1)

Why each option

Wireless sniffer output includes MAC addresses, and the first three octets identify the hardware vendor via the IEEE Organizationally Unique Identifier registry.

AHardware vendorCorrect

Every MAC address contains a three-octet OUI (Organizationally Unique Identifier) prefix registered with the IEEE that maps directly to the hardware manufacturer. A wireless sniffer captures MAC addresses from beacon frames, probe requests, and data frames, allowing an analyst to look up the OUI prefix to identify the vendor. This is a standard technique for identifying device types on a wireless network from passive capture data.

BChannel interference

Channel interference analysis requires spectrum analysis tools and signal-to-noise data, not information extractable from standard wireless frame captures.

CUsernames

Usernames exist at the application layer and are not present in wireless layer-2 frames unless the sniffer captures and decrypts higher-layer authenticated traffic.

DKey strength

Encryption key strength is determined by the cipher suite negotiated during the authentication handshake and is not directly readable as a discrete value from standard sniffer output.

Concept tested: MAC address OUI hardware vendor identification from wireless capture

Source: https://standards.ieee.org/products-services/regauth/oui/index.html

Topics

#wireless sniffing#MAC address#OUI lookup#network reconnaissance

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice