PW0-205 Wireless LAN Analysis Online Training Course

Demo Question 29.

You work at EliteCertify.com help desk, and around lunch time you receive a call asking for the password of network user Shazaam. You provide the caller with some incorrect information and immediately contact EliteCertify.com security department to report a social engineering attack. Although you are trained to recognize Shazaam as a red alert, how do you know for sure that a social engineering attack is taking place?

A. EliteCertify.com uses FakeAP as a protection mechanism against hackers. FakeAP is a utility that transmits thousands of fake management frames that can confuse hackers. Shazaam has been configured as a fake user name in these management frames and can be seen on a wireless protocol analyzer.
B. EliteCertify.com uses 802.1X/EAP-TTLS as their wireless security protocol for user authentication, and EAP-TTLS uses an "anonymous" user name outside the TLS tunnel. In this case, the anonymous user is named Shazaam, and it can be seen in clear text on a wireless protocol analyzer.
C. EliteCertify.com uses 802.1x/PEAP-EAP-TLS as their wireless security protocol for user authentication, and PEAP has a programmable integrated intrusion detection mechanism currently named Shazaam. This intrusion mechanism is picked up, in clear text, on wireless protocol analyzers as a user name.
D. EliteCertify.com uses IPSec VPNs to secure their wireless LAN. IPSec VPNs use an "anonymous" name field during the authentication process when using digital certificates. The network administrator has configured all wireless client stations to use Shazaam in the anonymous name field so that wireless protocol analyzers will mistakenly think it is a real user name.


Display Answer

Answer: B

Explanation: