SY0-301 · Question #179
Which of the following wireless security measures can an attacker defeat by spoofing certain properties of their network interface card?
The correct answer is B. MAC filtering. MAC filtering allows only pre-approved MAC addresses to connect to a wireless network. However, MAC addresses are transmitted in plaintext in 802.11 frames and are trivially observable by any nearby device in monitor mode. An attacker can sniff the air, observe an authorized…
Question
Which of the following wireless security measures can an attacker defeat by spoofing certain properties of their network interface card?
Options
- AWEP
- BMAC filtering
- CDisabled SSID broadcast
- DTKIP
How the community answered
(37 responses)- A5% (2)
- B89% (33)
- C3% (1)
- D3% (1)
Explanation
MAC filtering allows only pre-approved MAC addresses to connect to a wireless network. However, MAC addresses are transmitted in plaintext in 802.11 frames and are trivially observable by any nearby device in monitor mode. An attacker can sniff the air, observe an authorized MAC address, and then spoof (change) their own NIC's MAC address to match - bypassing the filter entirely. WEP is defeated by IV (initialization vector) statistical attacks, not NIC spoofing. Disabled SSID broadcast is defeated by passive sniffing of probe responses. TKIP has cryptographic vulnerabilities unrelated to NIC properties.
Topics
Community Discussion
No community discussion yet for this question.