Wireless Attack Countermeasures CEH Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital is deploying a new wireless network for medical devices that support only WPA2. The security policy requires strong encryption and mutual authentication. Which configuration should the administrator choose?

   • AWEP with a 128-bit key.
   • BWPA2-Enterprise with 802.1X and EAP-TLS using client certificates.
   • CWPA2-Personal with a pre-shared key (PSK) shared among all devices.
   • DWPA3-SAE with a shared passphrase.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to allow guests to use Wi-Fi for internet access but prevent them from reaching internal servers. They also want to keep guest traffic separate from employee traffic. Which approach is most appropriate?

   • ADisable the SSID broadcast and provide the network name to guests manually
   • BEnable WPA3-Personal on the existing network and share the password with guests
   • CCreate a separate guest SSID on a dedicated VLAN with a firewall rule blocking access to internal subnets
   • DUse the same SSID as employees but require a different password
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company's security policy requires that wireless access points be audited quarterly. During the audit, the administrator finds that several access points have been configured with WPA2-Personal instead of WPA2-Enterprise. What should the administrator do to enforce the policy?

   • ADisable the wireless network until the next audit.
   • BReconfigure the access points to use WPA2-Enterprise and update the configuration management documentation.
   • CChange the policy to allow WPA2-Personal.
   • DLeave the access points as they are because WPA2-Personal is still secure.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary function of a Wireless Intrusion Prevention System (WIPS)?

   • ATo passively monitor wireless traffic and log alerts for later review
   • BTo encrypt all wireless traffic using WPA3
   • CTo provide a secure VPN tunnel for remote users
   • DTo actively block or contain detected wireless attacks in real time
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A university wants to provide wireless access to students and staff using their existing Active Directory credentials. The security team requires that authentication be performed centrally and that each user's traffic be encrypted with a unique key. Which authentication mechanism should be used?

   • AWPA3-SAE with a shared passphrase.
   • BWPA2-Personal with a single pre-shared key.
   • COpen authentication with MAC address filtering.
   • DWPA2-Enterprise with 802.1X and PEAP-MSCHAPv2.
   Reveal Solution Discussion Select an answer first