Wireless Network Security CCT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which wireless security best practice involves analyzing the physical environment to determine optimal access point placement and minimize interference?

   • AConducting a site survey
   • BImplementing MAC filtering
   • CUsing strong encryption
   • DDisabling SSID broadcast
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A financial firm must comply with a regulation that requires strong encryption for all wireless data. The firm currently uses WPA2-TKIP on some legacy devices. The compliance deadline is near, and the budget is limited. Which approach best balances security, compliance, and cost?

   • AUpgrade all legacy devices to support WPA2-AES (CCMP) as soon as possible, even if it exceeds the budget.
   • BKeep WPA2-TKIP on a separate SSID for legacy devices and use WPA2-AES for all other traffic.
   • CNegotiate a phased upgrade plan with the compliance officer, prioritizing the most sensitive data paths to AES while documenting the risk of remaining TKIP devices.
   • DDisable wireless on all legacy devices and require them to use wired connections.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A university wants to provide Wi-Fi to students and staff. Students should use a shared password, while staff should use their Active Directory credentials. The university wants to avoid deploying additional authentication servers. Which approach is most appropriate?

   • ACreate two SSIDs: one with WPA2-Personal for students and one with WPA2-Enterprise using the existing Active Directory for staff
   • BUse a single SSID with WPA2-Personal and distribute the same password to both students and staff
   • CUse a single SSID with WPA2-Enterprise and issue certificates to all students and staff
   • DUse an open SSID with a captive portal that asks for a role selection
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An attacker sets up a laptop with a fake access point that broadcasts the same SSID as a coffee shop's free Wi-Fi. When customers connect, the attacker captures their credentials. Which type of attack is this, and what control would best prevent it?

   • AEvil twin attack; use a WIDS to detect unauthorized APs with the same SSID.
   • BDeauthentication attack; enable MAC filtering on the legitimate AP.
   • CRogue AP attack; disable SSID broadcast on the legitimate AP.
   • DWPS attack; disable WPS on the legitimate AP.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A hospital has deployed a WIDS to monitor its wireless environment. The system alerts on a new access point that is not on the approved list and is broadcasting the hospital's SSID. What is the most appropriate immediate action?

   • AChange the SSID on all legitimate APs to avoid confusion.
   • BUse the WIDS to locate the physical position of the unauthorized AP and then disconnect it from the network.
   • CIncrease the transmit power on legitimate APs to overpower the rogue AP.
   • DIgnore the alert because the WIDS may be producing a false positive.
   Reveal Solution Discussion Select an answer first