A security analyst is reviewing wireless logs and notices repeated deauthentication frames targeting a specific client. The analyst suspects a deauthentication attack. Which of the following actions are appropriate to confirm and mitigate the attack? (Select all that apply.)

Check for a rogue access point with the same SSID nearby

Review access point logs for unusual association attempts

Change the Wi-Fi password immediately

Use a WIDS to locate the source of the deauthentication frames

Disable WPS on the access point

Users in a corporate office report that their Wi-Fi disconnects every few minutes and they see a second SSID with the same name as the company network. A quick scan shows the company APs are on channel 6, but the duplicate SSID is on channel 11. What is the most likely attack and the best immediate response?

Evil twin attack; locate and remove the rogue AP broadcasting the duplicate SSID

RF interference; move access points to channel 1

Deauthentication attack; change the Wi-Fi password immediately

WPS attack; disable WPS on all access points

A company is deploying a guest Wi-Fi network. They want to prevent guests from accessing internal resources while still allowing internet access. They also want to prevent guests from seeing each other's traffic. Which configuration best meets these requirements?

Disable SSID broadcast and use WPA2-Personal

Use a captive portal without any network segmentation

Use the same VLAN as the corporate network but enable MAC filtering

Place the guest SSID on a separate VLAN with client isolation enabled and a firewall rule blocking access to internal subnets

A company wants to secure its wireless network against rogue APs and evil twin attacks. The company has a limited budget and cannot deploy a dedicated WIDS appliance. Which combination of existing features would be most effective?

Conduct a manual site survey once a year to look for rogue APs.

Use WPA2-Personal with a very long passphrase and change it monthly.

Use the access points' built-in rogue AP detection and enable 802.11w on the network.

Disable SSID broadcast and enable MAC filtering on all APs.

EC-CouncilCertified Cybersecurity Technician

Domain 4Objective 2

Wireless Network Security CCT Practice Questions (Page 3)

Part of the Cloud, Wireless, Mobile, and IoT/OT Security domain, which makes up ~17% of our current practice bank.

48questions here

10free pages

7concepts

Questions 11–15

11expert · hard · select all that apply
A security analyst is reviewing wireless logs and notices repeated deauthentication frames targeting a specific client. The analyst suspects a deauthentication attack. Which of the following actions are appropriate to confirm and mitigate the attack? (Select all that apply.)
Select an answer first
12application · medium
Users in a corporate office report that their Wi-Fi disconnects every few minutes and they see a second SSID with the same name as the company network. A quick scan shows the company APs are on channel 6, but the duplicate SSID is on channel 11. What is the most likely attack and the best immediate response?
Select an answer first
13expert · hard
A company is deploying a guest Wi-Fi network. They want to prevent guests from accessing internal resources while still allowing internet access. They also want to prevent guests from seeing each other's traffic. Which configuration best meets these requirements?
Select an answer first
14expert · hard
A company wants to secure its wireless network against rogue APs and evil twin attacks. The company has a limited budget and cannot deploy a dedicated WIDS appliance. Which combination of existing features would be most effective?
Select an answer first
15foundation · easy
Which wireless security protocol uses a 128-bit key and is considered cryptographically broken because its RC4-based encryption can be cracked in minutes?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Wireless Network Security CCT Practice Questions (Page 3)

Questions 11–15

A security analyst is reviewing wireless logs and notices repeated deauthentication frames targeting a specific client. The analyst suspects a deauthentication attack. Which of the following actions are appropriate to confirm and mitigate the attack? (Select all that apply.)

A company is deploying a guest Wi-Fi network. They want to prevent guests from accessing internal resources while still allowing internet access. They also want to prevent guests from seeing each other's traffic. Which configuration best meets these requirements?

A company wants to secure its wireless network against rogue APs and evil twin attacks. The company has a limited budget and cannot deploy a dedicated WIDS appliance. Which combination of existing features would be most effective?

Which wireless security protocol uses a 128-bit key and is considered cryptographically broken because its RC4-based encryption can be cracked in minutes?

Keep studying — Cloud, Wireless, Mobile, and IoT/OT Security