Linux Wireless Stack, Drivers & Assessment Toolchain

OSWP · 35 questions

• A city lab laptop cannot enter monitor mode during an authorized wireless assessment. What should the team investigate first?
• An assessor asks what mac80211 standardizes on modern Linux Wi-Fi stacks used in municipal labs. What is the best answer?
• A technician confuses managed mode with monitor mode during an authorized capture attempt on a county engagement. What distinction matters?
• Before enabling monitor mode, a municipal playbook says to check for interfering processes. Why does that step matter?
• A municipal assessor needs to know which airmon-ng action supports the aircrack-ng suite workflow. What is airmon-ng's purpose at a high level?
• A field kit for a municipal WLAN assessment lists airodump-ng, aireplay-ng, and aircrack-ng. How should the assessor map each tool to its primary role?
• A city asks how to identify a USB Wi-Fi adapter’s chipset when the plastic shell is unlabeled. What approach is most useful?
• An intern proposes using a pure client-mode USB dongle for deauthentication testing in a city lab. What capability concern should be raised?
• A municipal playbook mentions that the regulatory domain affects transmit power. What should assessors understand about that setting?
• A SOC wants SSH access to the exam Kali host while wireless tools keep running. What workflow practice best supports that need?
• After recovering a PSK in an authorized municipal lab, the next step is joining the SSID. Which statement best describes wpasupplicant-class tooling?
• A NetworkManager GUI fight with monitor mode frustrates a newbie on a city assessment laptop. What conflict class explains the pain?
• A city kit includes Alfa-class USB adapters for WLAN assessments. Why are external adapters commonly preferred in wireless labs?
• An assessor on a municipal engagement sees an interface named wlan0mon. How should that naming be interpreted?
• A city playbook says to put the card on the target channel before injection tests. Why does that matter?
• A municipal lab asks whether virtual machines always pass USB Wi-Fi adapters through cleanly. What is the realistic answer?
• A student confuses “aircrack-ng” the suite with “aircrack-ng” the cracker binary on a city training day. What clarification is correct?
• An assessor needs packet timestamps and frame-field detail beyond airodump-ng’s summary columns during a campus WLAN review. Which toolchain role fits?
• A city forbids installing random Git “auto Wi-Fi hack” scripts on assessment laptops. How does that policy align with good toolchain hygiene?
• A help desk asks whether enabling monitor mode by itself decrypts WPA2 traffic for a municipal investigation. What is accurate?
• A lab instruction for city assessors mentions rfkill blocking. What should they understand?
• A county kit documents driver module names for supported Wi-Fi cards. Why does that runbook exist?
• An assessor wants to confirm injection support with a non-destructive check before a timed municipal lab. What principle should guide that step?
• A student tries to capture in monitor mode while browsing the web on the same single Wi-Fi adapter. What limitation applies?
• A municipal standard requires documenting the adapter chipset in every wireless assessment report. What is the best reason for that requirement?
• A playbook lists iw and iwconfig-class commands for interface state on city assessment laptops. What role do those utilities play?
• An OffSec-style municipal lab bans wifite-class wrappers. What is the soundest toolchain-level reason?
• A city assessor dual-homes Ethernet for VPN backhaul and USB Wi-Fi for RF work. What lab networking benefit does that pattern provide?
• A newbie believes any Alfa-branded antenna guarantees wireless assessment success for the city kit. What correction is most accurate?
• A SOC asks when resetting a USB Wi-Fi adapter is reasonable during a stuck monitor session on a municipal engagement. What guidance fits?
• A city wireless lab must assess both 2.4 GHz and 5 GHz municipal SSIDs during one engagement. What hardware requirement best supports that dual-band work?
• An assessor documents firmware versions for municipal Wi-Fi USB dongles before monitor-mode work. Why does that firmware matter?
• A city uses Kali Linux as its wireless assessment distro. What is the most accurate view of Kali’s role?
• A municipal playbook stores wordlists on the assessment host. What statement best separates toolchain preparation from illegal targeting?
• After monitor-mode work on a civic assessment laptop, the technician must restore normal Wi-Fi to upload the report. What teardown step is most appropriate?