GIAC GIAC Information Security GSNA Questions & Answers

• Question 411:

  SIMULATION

  Fill in the blanks with the appropriate protocol.

  CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) is an IEEE encryption protocol created to replace both TKIP and ______.

  Correct Answer: WEP

  CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) is an IEEE 802.11i encryption protocol created to replace both TKIP, the mandatory protocol in WPA, and WEP, the earlier, insecure protocol. CCMP is a mandatory part of the WPA2 standard, an optional part of the WPA standard, and a required option for Robust Security Network (RSN) Compliant networks. CCMP is also used in the ITU-T home and business networking standard. CCMP, part of the 802.11i standard, uses the Advanced Encryption Standard (AES) algorithm. Unlike in TKIP, key management and message integrity is handled by a single component built around AES using a 128-bit key, a 128-bit block, and 10 rounds of encoding per the FIPS 197 standard.

• Question 412:

  SIMULATION

  Fill in the blank with the appropriate command.

  You want to search the most recent command that starts with the string 'user'. For this, you will enter the ________ command to get the desired result.

  Correct Answer: history !user

  Here, you will use the history !user command to search the most recent command that starts with the string 'user'. In the bash shell, the history command is used to view the recently executed commands. History is on by default. A user can turn off history using the command set +o history and turn it on using set -o history. An environment variable HISTSIZE is used to inform bash about how many history lines should be kept. The following commands are frequently used to view and manipulate history:

  

• Question 413:

  SIMULATION

  Fill in the blank with the appropriate tool name.

  __________ is a wireless network cracking tool that exploits the vulnerabilities in the RC4 Algorithm, which comprises the WEP security parameters.

  Correct Answer: WEPcrack

  WEPcrack is a wireless network cracking tool that exploits the vulnerabilities in the RC4 algorithm, which comprises the WEP security parameters. It mainly consists of three tools:

  1.

  WeakIVGen: It allows a user to emulate the encryption output of 802.11 networks to weaken the secret key used to encrypt the network traffic.

  2.

  Prism-getIV: It analyzes packets of information until ultimately matching patterns to the one known to decrypt the secret key.

  3.

  WEPcrack: It pulls all beneficial data of WeakIVGen and Prism-getIV to decipher the network encryption.