ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 31 - CWAP-404 discussion

Report
Export

After examining a Beacon frame decode you see the SSID Element has a length of 0. What do you conclude about this frame?

A.
The frame is corrupted
Answers
A.
The frame is corrupted
B.
SSID elements always have a length of 0
Answers
B.
SSID elements always have a length of 0
C.
This is a common attack on WISP backend SQL databases
Answers
C.
This is a common attack on WISP backend SQL databases
D.
The beacon is from a BSS configured to hide the SSID
Answers
D.
The beacon is from a BSS configured to hide the SSID
Suggested answer: D

Explanation:

If the SSID element has a length of 0 in a Beacon frame decode, it means that the beacon is from a BSS configured to hide the SSID. The SSID element is a part of the Beacon frame that contains the name or identifier of the BSS. The SSID element has two fields: length and value. The length field indicates how many bytes are used for the value field, which contains the actual SSID string. If the length field is 0, it means that there is no value field or SSID string in the element. This is a common technique used by some APs to hide their SSID from passive scanning clients or potential attackers. However, this technique does not provide much security, as there are other ways to discover or reveal the hidden SSID, such as active scanning or capturing probe response or association frames.Reference:[Wireless Analysis Professional Study Guide CWAP-404], Chapter 5: 802.11 MAC Sublayer, page 122-123

asked 16/09/2024
Oscar Ballabriga
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first