Wireless Network Security CCT Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A security auditor is reviewing a wireless network that uses WPA2-TKIP. The auditor recommends upgrading to WPA2-AES. What is the primary security reason for this recommendation?

   • ATKIP is not compatible with WPA2.
   • BTKIP uses RC4, which is cryptographically weaker than AES and has known vulnerabilities.
   • CAES is faster than TKIP on all hardware.
   • DTKIP does not support authentication.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security team is investigating a series of Wi-Fi disconnects. They find a rogue access point with the same SSID as the corporate network but with a stronger signal. The rogue AP is connected to the wired network via an unused wall jack. Which combination of actions best mitigates this threat and prevents recurrence?

   • AIncrease the transmit power of legitimate access points to overpower the rogue AP
   • BDisconnect the rogue AP, disable the unused wall jack, and deploy a WIPS to detect future rogue APs
   • CChange the Wi-Fi password and enable MAC filtering on all access points
   • DDisable SSID broadcast on the corporate network
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which component in an infrastructure wireless network is responsible for connecting wireless clients to the wired network and typically manages authentication and association?

   • AWireless controller
   • BWireless access point
   • CWireless client adapter
   • DDistribution system
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which encryption mechanism is used in WPA2 to provide data confidentiality and integrity, and is based on the AES block cipher?

   • ACCMP
   • BWEP
   • CTKIP
   • DSAE
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A security analyst notices that a legitimate client is frequently disconnecting from the corporate WPA2-Enterprise network. The analyst captures wireless traffic and sees repeated deauthentication frames from a device with a MAC address that does not match any known access point. What is the most likely attack and what mitigation would be most effective?

   • AThe client has a weak signal and is roaming between APs; adjust the AP transmit power.
   • BThe RADIUS server is rejecting the client's credentials; check the RADIUS logs.
   • CThe attacker is performing a deauthentication attack to force the client to connect to an evil twin; implement 802.11w (PMF) on the WPA2-Enterprise network.
   • DThe client's wireless driver is outdated; update the driver on the client device.
   Reveal Solution Discussion Select an answer first