PT0-001 · Question #52
A penetration tester is reviewing the following output from a wireless sniffer: Which of the following can be extrapolated from the above information?
The correct answer is A. Hardware vendor. Wireless sniffer output includes MAC addresses, and the first three octets identify the hardware vendor via the IEEE Organizationally Unique Identifier registry.
Question
A penetration tester is reviewing the following output from a wireless sniffer:
Which of the following can be extrapolated from the above information?
Options
- AHardware vendor
- BChannel interference
- CUsernames
- DKey strength
How the community answered
(52 responses)- A88% (46)
- B2% (1)
- C8% (4)
- D2% (1)
Why each option
Wireless sniffer output includes MAC addresses, and the first three octets identify the hardware vendor via the IEEE Organizationally Unique Identifier registry.
Every MAC address contains a three-octet OUI (Organizationally Unique Identifier) prefix registered with the IEEE that maps directly to the hardware manufacturer. A wireless sniffer captures MAC addresses from beacon frames, probe requests, and data frames, allowing an analyst to look up the OUI prefix to identify the vendor. This is a standard technique for identifying device types on a wireless network from passive capture data.
Channel interference analysis requires spectrum analysis tools and signal-to-noise data, not information extractable from standard wireless frame captures.
Usernames exist at the application layer and are not present in wireless layer-2 frames unless the sniffer captures and decrypts higher-layer authenticated traffic.
Encryption key strength is determined by the cipher suite negotiated during the authentication handshake and is not directly readable as a discrete value from standard sniffer output.
Concept tested: MAC address OUI hardware vendor identification from wireless capture
Source: https://standards.ieee.org/products-services/regauth/oui/index.html
Topics
Community Discussion
No community discussion yet for this question.