MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is the main purpose of Wi-Fi Protected Setup (WPS)?
a. To improve internet speed
b. To simplify secure Wi-Fi network configuration
c. To prevent malware attacks
d. To manage network devices
Answer: b. To simplify secure Wi-Fi network configurationwikipedia+2
Which wireless security protocols does WPS support?
a. Only WEP
b. WPA and WPA2 Personal
c. TLS and SSL
d. IPsec only
Answer: b. WPA and WPA2 Personalgeeksforgeeks+2
What is a commonly used device authentication method for WPS?
a. Push Button Configuration (PBC)
b. VPN Certificate
c. MAC Filtering
d. IPv6 tunneling
Answer: a. Push Button Configuration (PBC)smallnetbuilder+1
WPS does NOT function on networks secured with which protocol?
a. WPA2
b. WPA
c. WEP
d. WPA3
Answer: c. WEPmetageek+1
What is the major vulnerability discovered in WPS in 2011?
a. SQL Injection
b. Brute-force attack on WPS PIN
c. Ransomware propagation
d. Password spraying
Answer: b. Brute-force attack on WPS PINnerdsonsite+2
Which WPS method is most susceptible to brute-force attacks?
a. Push button
b. PIN-based authentication
c. NFC configuration
d. USB transfer
Answer: b. PIN-based authenticationpurplesec+2
What tool is commonly used to perform brute-force attacks on WPS PINs?
a. John the Ripper
b. Reaver
c. Burp Suite
d. Nessus
Answer: b. Reaverpurplesec
What option most effectively mitigates WPS brute-force vulnerability?
a. Use longer SSID names
b. Disable WPS feature
c. Change Wi-Fi channels
d. Enable guest network
Answer: b. Disable WPS featurewikipedia+2
In WPS, what does the checksum digit validate?
a. Security protocol
b. First seven digits of the PIN
c. MAC address
d. SSID name
Answer: b. First seven digits of the PINwikipedia
The “Pixie Dust” attack targets which aspect of WPS?
a. Encryption algorithm
b. Weak entropy in key generation
c. DNS routing
d. Firmware upgrade
Answer: b. Weak entropy in key generationhelpnetsecurity+1
WPS connections can use which additional configuration method?
a. CAPTCHA
b. NFC (Near Field Communication)
c. VPN tunneling
d. SSH keys
Answer: b. NFC (Near Field Communication)geeksforgeeks+1
What kind of devices often have the WPS feature enabled by default?
a. Smart TVs only
b. Wireless routers and printers
c. Desktop computers
d. Network switches
Answer: b. Wireless routers and printerswikipedia
Which network authentication protocol is exchanged securely over WPS?
a. RADIUS
b. Extensible Authentication Protocol (EAP)
c. Kerberos
d. MSCHAPv2
Answer: b. Extensible Authentication Protocol (EAP)geeksforgeeks
What critical mistake do some router interfaces make regarding WPS?
a. Disabling internet connection
b. Suppressing WPS checkbox without removing actual functionality
c. Enabling guest network by default
d. Hiding SSID
Answer: b. Suppressing WPS checkbox without removing actual functionalityhelpnetsecurity+1
What is the typical range of guesses needed for brute-force recovery of a WPS PIN?
a. Millions
b. Around 11,000
c. Over 200,000
d. Just 50
Answer: b. Around 11,000wikipedia
Which type of businesses are at increased risk due to unpatched WPS vulnerabilities?
a. Large enterprises only
b. Small offices, retail & healthcare
c. Internet cafes
d. ISPs
Answer: b. Small offices, retail & healthcareindustrialcyber+1
What is the main advantage of WPS for home users?
a. Encryption strength
b. Ease of device onboarding
c. Firmware updates
d. SSID access controls
Answer: b. Ease of device onboardinglarksuite+1
Which security protocol deprecated use with WPS due to weak cryptography?
a. WPA2
b. WPA3
c. WEP
d. EAP-TLS
Answer: c. WEPgeeksforgeeks
What should users check after disabling WPS in the router GUI?
a. Firmware actually disables WPS
b. Wi-Fi channel changes
c. SSID broadcast resumes
d. DHCP pool size
Answer: a. Firmware actually disables WPShelpnetsecurity+1
What is a significant risk of using deprecated USB WPS configuration mode?
a. Malware injection via USB
b. Brute-force PIN attacks
c. Packet sniffing
d. MAC spoofing
Answer: a. Malware injection via USBgeeksforgeeks
Which activity can attackers perform with a compromised WPS network?
a. Increase bandwidth usage
b. Monitor network traffic and steal credentials
c. Block all devices
d. Change router SSID remotely
Answer: b. Monitor network traffic and steal credentialsnerdsonsite+1
Most routers vulnerable to “Pixie Dust” attack remain so because:
a. No patch available
b. Hardware limitation
c. Unpatched firmware and hidden WPS
d. User error only
Answer: c. Unpatched firmware and hidden WPSindustrialcyber+1
What is the immediate action if a network is compromised due to WPS attack?
a. Change channel
b. Disable WPS and change Wi-Fi password
c. Upgrade RAM
d. Unplug all network devices
Answer: b. Disable WPS and change Wi-Fi passwordnerdsonsite+1
For protecting against WPS vulnerabilities, administrators should:
a. Monitor only external traffic
b. Regularly update router firmware
c. Disable physical network ports
d. Block all MAC addresses
Answer: b. Regularly update router firmwareindustrialcyber+1
Which of these is NOT a recommended method for secure Wi-Fi onboarding if WPS is disabled?
a. Manual WPA2 passphrase input
b. QR code exchange
c. Default router password use
d. WPA3-based protected management frame
Answer: c. Default router password useesecurityplanet+1
Which protocol does WPS assist in configuring automatically?
a. IPsec
b. WPA/WPA2 Personal security
c. SSH
d. SSL/TLS
Answer: b. WPA/WPA2 Personal securityesecurityplanet+1
Who developed the WPS standard?
a. IETF
b. ISO
c. Wi-Fi Alliance
d. IEEE
Answer: c. Wi-Fi Alliancewikipedia
What does disabling SSID broadcast do regarding WPS risks?
a. Ensures WPS cannot be attacked
b. Has no effect on WPS PIN vulnerabilities
c. Allows brute force attacks to increase
d. Weakens overall router security
Answer: b. Has no effect on WPS PIN vulnerabilitiespurplesec
What is the primary risk with using default PIN for WPS authentication?
a. Easily guessed and brute-forced
b. High entropy makes it random
c. VPN connections blocked
d. Unused ports remain open
Answer: a. Easily guessed and brute-forcedhelpnetsecurity+1
Which technique can attackers use to exploit vulnerable WPS implementations?
a. Rogue Access Point deployment
b. Man-in-the-middle SSL interception
c. Brute-force PIN guessing
d. DNS poisoning only
Answer: c. Brute-force PIN guessingnerdsonsite+2
Which component validates the authenticity of a WPS network registration?
a. Access Point (Registrar)
b. Network switch
c. End-user device only
d. MAC address filter
Answer: a. Access Point (Registrar)smallnetbuilder+1
What is the recommended configuration for users concerned about WPS vulnerabilities?
a. Disable WPS and use strong passwords
b. Leave WPS enabled for convenience
c. Upgrade every client device
d. Routinely change SSID name
Answer: a. Disable WPS and use strong passwordspurplesec+1
What happens if a brute-force attack is detected by a properly configured WPS-enabled AP?
a. Immediate network shutdown
b. Temporary lockout of PIN-based registrations
c. Audible alarm triggers
d. Logs sent to ISP
Answer: b. Temporary lockout of PIN-based registrationspurplesec+1
What type of setup does WPS’s “push-button” mode avoid?
a. Remote configuration
b. Manual password entry
c. Automatic SSID detection
d. MAC filtering setup
Answer: b. Manual password entrysmallnetbuilder+1
A network with WPS disabled is best protected from:
a. Brute-force WPS PIN attacks
b. ARP poisoning
c. Wireless jamming
d. Rogue DHCP servers
Answer: a. Brute-force WPS PIN attacksnerdsonsite+1
Which wireless standard supersedes WPA2 and further improves connection security, but is not directly linked to WPS?
a. WPA3
b. Wi-Fi 4
c. LTE
d. Bluetooth 5
Answer: a. WPA3esecurityplanet
What configuration option is often misrepresented in router UIs related to WPS?
a. WPS appears disabled but is active in firmware
b. WPA2 appears instead of WPA3
c. SSID always shown in networks
d. Guest networks renamed to WPS
Answer: a. WPS appears disabled but is active in firmwarehelpnetsecurity+1
Using which method can attackers bypass WPS protections on unpatched devices?
a. Exploiting firmware vulnerability
b. Changing SSID
c. Resetting access point
d. Using WPA3 encryption
Answer: a. Exploiting firmware vulnerabilityindustrialcyber+1
What does WPS randomly generate for device onboarding?
a. MAC address
b. Security key (WPA-PSK)
c. DHCP lease
d. VLAN tag
Answer: b. Security key (WPA-PSK)geeksforgeeks
Which legacy option for WPS device onboarding is now deprecated?
a. Push button
b. PIN entry
c. USB transfer
d. NFC pairing
Answer: c. USB transfergeeksforgeeks
What basic security measure prevents most wireless attacks, including WPS-related issues?
a. Keeping router firmware updated
b. Broadcasting SSID always
c. Using open networks
d. Disabling WPA2
Answer: a. Keeping router firmware updatedindustrialcyber+1
Why do many business environments avoid WPS despite its ease of use?
a. High security risks and potential vulnerabilities
b. Cost of hardware
c. Incompatibility with VPN
d. Static IP restriction
Answer: a. High security risks and potential vulnerabilitiesacm
What network credential does WPS allow users to skip in onboarding?
a. WPA-PSK passphrase
b. MAC address registration
c. ARP cache input
d. VLAN configuration
Answer: a. WPA-PSK passphrasewikipedia+1
Which mode requires physical proximity to the access point for WPS connection?
a. Push button
b. NFC pairing
c. PIN entry
d. USB pairing
Answer: b. NFC pairingsmallnetbuilder+1
What authentication protocol is foundational for WPA2 and used by WPS?
a. EAP (Extensible Authentication Protocol)
b. PAP
c. MSCHAPv2
d. RADIUS only
Answer: a. EAP (Extensible Authentication Protocol)geeksforgeeks
Which network device is most likely to have WPS vulnerabilities if unpatched?
a. Wireless router
b. Desktop PC
c. Web server
d. Switch
Answer: a. Wireless routernerdsonsite+2
Which setting should NOT be used as sole defense against WPS PIN attacks?
a. MAC filtering
b. Disabling WPS feature
c. Changing SSID
d. Network segmentation
Answer: a. MAC filteringpurplesec
What method should network admins use to confirm WPS is truly disabled?
a. Check router documentation and firmware status
b. Only check router UI
c. Reboot router
d. Hide SSID
Answer: a. Check router documentation and firmware statushelpnetsecurity+2
What key limitation is present in push-button WPS mode?
a. Physical access needed to press button
b. Random PIN use
c. Packet sniffing always successful
d. Virtual MAC addresses required
Answer: a. Physical access needed to press buttonroutersecurity+1
Why is WPS still found on many modern devices despite widespread vulnerabilities?
a. User convenience and ease of initial device setup
b. Cost savings
c. Required by internet providers
d. No alternatives available
Answer: a. User convenience and ease of initial device setuplarksuite+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info