Wireless Network Security CCT Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A small law firm wants to deploy Wi-Fi for its five attorneys and two paralegals. They need to ensure that only approved company devices can connect, and they want to avoid the overhead of managing a RADIUS server. Which configuration best meets their requirements?

   • AWPA3-Enterprise with 802.1X and EAP-TLS
   • BWEP with a 128-bit key and SSID broadcast disabled
   • COpen network with a captive portal requiring a shared password
   • DWPA2-Personal with a strong passphrase and MAC address filtering
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security analyst is investigating a report of slow wireless performance. The analyst discovers that a nearby attacker is sending continuous deauthentication frames to all clients on the corporate WPA2 network. Which mitigation would be most effective while maintaining compatibility with older clients?

   • AEnable 802.11w (Protected Management Frames) on the access points, but note that some older clients may not support it.
   • BEnable MAC filtering to block the attacker's MAC address.
   • CIncrease the transmit power on the access points to overpower the attacker's signal.
   • DChange the SSID to a less predictable name.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which wireless security protocol introduced the Simultaneous Authentication of Equals (SAE) handshake to protect against offline dictionary attacks?

   • AWEP
   • BWPA
   • CWPA2
   • DWPA3
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A small business wants to secure its Wi-Fi without investing in additional hardware. The router supports WPA2 and WPA3. Which configuration offers the strongest security while maintaining compatibility with older laptops that do not support WPA3?

   • AUse WPA2-Enterprise with a RADIUS server that does not exist.
   • BUse WPA2-Personal with a long passphrase and disable WPA3.
   • CEnable WPA3/WPA2 mixed mode (transition mode) with a strong passphrase.
   • DUse WPA3-Personal only and require all older laptops to be upgraded.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company's security team is conducting a wireless vulnerability assessment. They want to identify unauthorized access points and misconfigured client devices. Which tool or technique would be most effective for this task?

   • AUse a protocol analyzer to capture traffic on the wired network only.
   • BUse a wireless analyzer to perform a site survey and capture beacon frames to identify all APs in the area.
   • CReview the DHCP server logs for unknown IP addresses.
   • DDisable SSID broadcast on all APs and see if clients still connect.
   Reveal Solution Discussion Select an answer first