Wireless Attack Countermeasures CEH Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which technique is commonly used to discover rogue access points on a wireless network?

   • APing sweeps of the wired network
   • BPort scanning with Nmap
   • CWireless site surveys using spectrum analyzers
   • DReviewing DNS logs
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is implementing a wireless network for employees who use a variety of devices, including some that do not support certificates. The security team wants to use 802.1X authentication but needs a method that works with username/password credentials. Which EAP method should be chosen?

   • ALEAP, which uses a shared secret.
   • BPEAP-MSCHAPv2, which uses a server-side certificate and tunneled username/password authentication.
   • CEAP-TLS, which requires client certificates on every device.
   • DEAP-MD5, which uses a simple password hash.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is an example of a wireless security policy?

   • AAll wireless devices must use WPA2 or WPA3 encryption.
   • BThe network administrator will change the SSID every month.
   • CUsers should turn off their wireless adapters when not in use.
   • DWireless access points should be placed near windows for better coverage.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In the context of securing a WLAN, which of the following best describes the role of wireless attack countermeasures?

   • AThey are legal regulations that mandate specific wireless security configurations for all organizations.
   • BThey are software tools that automatically patch all wireless access points without any human intervention.
   • CThey are primarily hardware devices that physically block unauthorized users from entering a building's wireless coverage area.
   • DThey are a set of policies, tools, and techniques used to prevent, detect, and respond to threats targeting wireless networks.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to allow guests to use the wireless network but wants to ensure that guests cannot access internal corporate resources. The administrator plans to create a separate SSID for guests. Which additional configuration is necessary to enforce this separation?

   • APlace the guest SSID on a separate VLAN with a firewall rule that blocks traffic to the corporate VLAN.
   • BUse WPA2-Personal with a strong passphrase for the guest SSID.
   • CEnable MAC address filtering on the guest SSID.
   • DDisable SSID broadcast for the guest network.
   Reveal Solution Discussion Select an answer first