Wireless Network Security CCT Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A company's WIDS has detected a rogue AP that is broadcasting the same SSID as the corporate network. The rogue AP is located in a neighboring office building. The company cannot physically access the neighboring building. What is the best course of action?

   • AIncrease the transmit power on your own APs to drown out the rogue AP.
   • BIgnore the rogue AP because it is outside your premises.
   • CUse directional antennas to locate the exact position of the rogue AP and then contact the building management to have it removed.
   • DChange your SSID to a different name to avoid confusion.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which encryption mechanism was designed as a transitional solution for WPA and uses RC4 with per-packet key mixing and a Message Integrity Check (MIC)?

   • AWPA3
   • BTKIP
   • CAES
   • DCCMP
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A retail store's legacy payment terminals only support WPA2 with TKIP. The store must comply with a new security policy that requires AES encryption on all wireless networks. What should the administrator do?

   • AKeep WPA2-TKIP on a separate SSID for the payment terminals and use WPA2-AES for all other devices.
   • BConfigure the access points to use WPA2-AES but leave the payment terminals on TKIP in a mixed mode.
   • CReplace the payment terminals with models that support WPA2-AES (CCMP).
   • DDisable encryption on the payment terminal network because it is isolated from the internet.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A hospital's network team is deploying a WIDS to monitor for rogue access points. The WIDS will be placed in the main corridor, but the hospital has many private rooms with thick walls. The team must detect rogue APs in patient rooms while minimizing false positives from neighboring businesses. Which deployment strategy is most effective?

   • ADeploy a single high-sensitivity sensor in the main corridor and rely on its range
   • BDisable the WIDS at night to reduce false positives
   • CDeploy multiple WIDS sensors throughout the facility, including in patient rooms, and tune thresholds to ignore weak signals from outside
   • DUse only periodic manual surveys with a handheld analyzer
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   Users in a warehouse report that their wireless connections drop frequently and they see a second network with the same name as the company SSID. A quick scan shows the company APs are all functioning. What is the most likely cause and the first step to confirm it?

   • AA rogue access point is broadcasting the same SSID; use a wireless analyzer to locate the unauthorized AP.
   • BThe wireless controller has a firmware bug; update the firmware on all APs.
   • CThe company APs are overloaded; reboot them to restore service.
   • DThe clients are associating to a neighboring business's network; change the company SSID to something unique.
   Reveal Solution Discussion Select an answer first