Exam PT0-003 Topic 4 Question 99 Discussion
Actual exam question for CompTIA's PT0-003 exam
Question #: 99
Topic #: 4
Question #: 99
Topic #: 4
A penetration tester is conducting a wireless security assessment for a client with 2.4GHz and 5GHz access points. The tester places a wireless USB dongle in the laptop to start capturing WPA2 handshakes. Which of the following steps should the tester take next?
Suggested Answer: A Vote an answer
Enabling monitoring mode on the wireless adapter is the essential step before capturing WPA2 handshakes.
Monitoring mode allows the adapter to capture all wireless traffic in its vicinity, which is necessary for capturing handshakes.
* Preparation:
* Wireless USB Dongle: Ensure the wireless USB dongle is compatible with monitoring mode and packet injection.
* Aircrack-ng Suite: Use the Aircrack-ng suite, a popular set of tools for wireless network auditing.
* Enable Monitoring Mode:
* Command: Use the airmon-ng tool to enable monitoring mode on the wireless interface.
Step-by-Step Explanationairmon-ng start wlan0
* Verify: Check if the interface is in monitoring mode.
iwconfig
* Capture WPA2 Handshakes:
* Airodump-ng: Use airodump-ng to start capturing traffic and handshakes.
airodump-ng wlan0mon
* References from Pentesting Literature:
* Enabling monitoring mode is a fundamental step in wireless penetration testing, discussed in guides like "Penetration Testing - A Hands-on Introduction to Hacking".
* HTB write-ups often start with enabling monitoring mode before proceeding with capturing WPA2 handshakes.
Monitoring mode allows the adapter to capture all wireless traffic in its vicinity, which is necessary for capturing handshakes.
* Preparation:
* Wireless USB Dongle: Ensure the wireless USB dongle is compatible with monitoring mode and packet injection.
* Aircrack-ng Suite: Use the Aircrack-ng suite, a popular set of tools for wireless network auditing.
* Enable Monitoring Mode:
* Command: Use the airmon-ng tool to enable monitoring mode on the wireless interface.
Step-by-Step Explanationairmon-ng start wlan0
* Verify: Check if the interface is in monitoring mode.
iwconfig
* Capture WPA2 Handshakes:
* Airodump-ng: Use airodump-ng to start capturing traffic and handshakes.
airodump-ng wlan0mon
* References from Pentesting Literature:
* Enabling monitoring mode is a fundamental step in wireless penetration testing, discussed in guides like "Penetration Testing - A Hands-on Introduction to Hacking".
* HTB write-ups often start with enabling monitoring mode before proceeding with capturing WPA2 handshakes.
by Lionel at Jul 04, 2025, 02:28 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).