Wireless Network Security CCT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company's Wi-Fi uses WPA2-Personal. An attacker is able to capture the four-way handshake and perform an offline dictionary attack to recover the passphrase. Which additional control would best mitigate this specific attack?

   • AEnable MAC filtering to allow only known devices
   • BDisable SSID broadcast to hide the network
   • CReduce the transmit power of access points
   • DUse a long, random passphrase that is not in any dictionary
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A small business wants to secure its Wi-Fi network. The owner has read that disabling SSID broadcast and enabling MAC filtering are good security practices. Which statement accurately describes the effectiveness of these measures?

   • AThey are required for WPA3 to function
   • BThey provide a false sense of security because SSIDs are still discoverable and MAC addresses can be spoofed
   • CThey are strong security controls that prevent unauthorized access
   • DThey are sufficient when combined with WEP encryption
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is migrating from WPA2-Personal to WPA3-Enterprise. The network team must support a mix of legacy IoT devices that only support WPA2-Personal and modern laptops that support WPA3. The company wants to maintain strong security for the laptops while keeping the IoT devices functional. Which approach is the best trade-off?

   • AReplace all IoT devices with models that support WPA3-Enterprise
   • BDeploy two SSIDs: one WPA3-Enterprise for laptops and one WPA2-Personal for IoT devices, with the IoT SSID isolated on a separate VLAN
   • CUse a single SSID with WPA3-Enterprise and configure the IoT devices to use WPA2-Personal in transition mode
   • DUse a single SSID with WPA2-Personal for all devices to maintain compatibility
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A corporation wants to deploy WPA2-Enterprise for its employees, but some legacy devices do not support 802.1X. The security team wants to maintain strong security while allowing these devices to connect. Which approach is most appropriate?

   • AUse WPA2-Personal for all devices to simplify management.
   • BCreate a separate SSID with WPA2-Personal for legacy devices and use a strong passphrase, while keeping WPA2-Enterprise for modern devices.
   • CDisable wireless on legacy devices and require wired connections.
   • DReplace all legacy devices with ones that support 802.1X.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is choosing between WPA2 and WPA3 for its new wireless network. The company's laptops and smartphones all support WPA3. Which statement correctly describes a key advantage of WPA3 over WPA2?

   • AWPA3 uses TKIP for encryption, which is faster than AES
   • BWPA3 uses SAE (Simultaneous Authentication of Equals) to resist offline dictionary attacks
   • CWPA3 eliminates the need for authentication entirely
   • DWPA3 uses a fixed 64-bit key for all connections
   Reveal Solution Discussion Select an answer first