CEH exam prep 3 Questions and Answers Already Passed Latest Update

CEH exam prep 3 Questions and Answers Already Passed Latest Update This standard corresponds to WLANs and uses FHSS or DSSS as the frequency hopping spectrum. It allows an electronic device to connect to the internet using a wireless connection that is established in any network. - Answers 802.11 (wifi) This standard is the second extension to the original 802.11 standard. It operates in the 5 GHz frequency band and supports a bandwidth of up to 54 Mbps by using OFDM. It has a fast maximum speed, but is more sensitive to walls and other obstacles - Answers 802.11a IEEE expanded the 802.11 standard by creating the 802.11b specifications in 1999. This standard operates in the 2.4 GHz industrial, scientific and medical (ISM) radio band and supports a bandwidth of up to 11 Mbps by using DSSS modulation - Answers 802.11b This standard is an enhanced version of the 802.11a and 802.11b standards. It supports the regulatory domains. The particulars of this standard can be set at the media access control (MAC) layer. - Answers 802.11d This standard defines the quality of service (QoS) for wireless applications. The enhanced service is modified using the MAC layer. This standard maintains the quality of video and audio streaming, real-time online applications, voice over internet protocol (VoIP), etc. - Answers 802.11e This standard is an extension of the 802.11 standard. It supports a maximum bandwidth of 54 Mbps using the OFDM technology and uses the same 2.4 GHz band as 802.11b. It is compatible with the 802.11b standard, which implies that 802.11b devices can work directly with an 802.11g access point. - Answers 802.11g This standard is used as a standard for WLANs and provides improved encryption for networks. 802.11i requires new protocols such as TKIP and advanced encryption standard (AES). - Answers 802.11i This standard was developed in 2009. It aims to improve the 802.11g standard in terms of the bandwidth. It operates on both the 2.4 and 5 GHz bands and supports a maximum data rate up to 300 Mbps. It uses multiple transmitters and receiver antennas (MIMO) to allow a maximum data rate along with security improvements. - Answers 802.11n This standard provides a high throughput network at the frequency of 5 GHz. It is faster and more reliable than the 802.11n standard. It involves gigabit networking which provides an instantaneous data transfer experience. - Answers 802.11ac also known as Wi-Fi 6. It is the sixth generation of the Wi-Fi standard. It is designed to operate in all ISM bands between 1 and 6 GHz. - Answers 802.11ax involves the inclusion of a new physical layer for 802.11 networks. This standard works on the 60 GHz spectrum. The data propagation speed in this standard is significantly different from the bands operating at 2.4 GHz and 5 GHz. With a very high frequency spectrum, the transfer speed is much higher than that of 802.11n. - Answers 802.11ad This standard dominates media utilization by working on the demand priority protocol. Based on this standard, the ethernet speed increases to 100 Mbps. It is compatible with the 802.3 and 802.5 standards. Users currently on these standards can directly upgrade to the 802.12 standard. - Answers 802.12 This defines the standards for a wireless personal area network (WPAN). It describes the specification for wireless connectivity with fixed or portable devices. - Answers 802.15 mainly used for exchanging data between fixed and mobile devices over short distances - Answers 802.15.1 Bluetooth transmits long distance data through a mesh network. This specification handles applications operating at a low data rate, but longer battery life. Its data rate is 250 kbits/s - Answers 802.15.4 zigbee This standard deploys itself on a full mesh or a half mesh topology. It includes network initialization, addressing, and unicasting. - Answers 802.15.5 RC4/24-bits/40/104-bits/no key man/CRC-32 - Answers WEP RC4, TKIP/48-bits/128-bits/4-way/Micheal Algo CRC-32 - Answers WPA AES-CCMP/48-bits/128-bits/4-way/CBC-MAC - Answers WPA2 AES-GCMP256/Arb leng 1-2^64/ 192-bits/ECDH and ECDSA/ BIP-GMAC-256 - Answers WPA3 port mirroring feature on Cisco switches is - Answers Switched Port Analyzer (SPAN) normal traffic signatures for TCP packets - Answers To establish a three-way handshake, TCP uses SYN, SYN ACK, and ACK bits in every session. o The ACK bit should be set in every packet, except for the initial packet, in which the SYN bit is set. o FIN ACK and ACK are used in terminating a connection. PSH FIN and ACK may also be used initially in the same process. o RST and RST ACK are used to quickly end an on-going connection. o During a conversation (after a handshake and before termination), packets only contain an ACK bit by default. Occasionally, they may also have a PSH or URG bit set. suspicious TCP packet has one or more of the following characteristics: - Answers o If both SYN and FIN bits are set, the TCP packet is illegal. o SYN FIN PSH, SYN FIN RST, and SIN FIN PSH RST are all variants of SIN FIN. An attacker sets these additional bits to avoid detection. o A packet having only a FIN flag is illegal as FIN can be used in network mapping, port scanning, and other stealth activities. o Some packets have all six flags unset; these are known as NULL flags and are illegal. o The source or destination port is zero. o If the ACK flag is set, then the acknowledgement number should not be zero. o If a packet has only the SYN bit, which is set at the beginning to establish a connection, and any other data are present, then it is an illegal packet. o If the destination address is a broadcast address (ending with 0 or 255), it is an illegal packet. o Every TCP packet has two bits reserved for future use. If either or both are set, then the packet is illegal Traffic containing certain signatures that may appear suspicious but might not be malicious - Answers Informational traffic signatures may include the following: o Internet Control Message Protocol (ICMP) echo requests o TCP connection requests o User Datagram Protocol (UDP) connections Traffic containing certain signatures that indicate an attempt to gain information - Answers Reconnaissance traffic signatures may include the following: o Ping sweep attempts o Port scan attempts o Domain Name System (DNS) query attempts