Wireless Attack Countermeasures CEH Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary purpose of placing wireless traffic on a separate VLAN?

   • ATo eliminate the need for encryption.
   • BTo isolate wireless traffic from the wired network and limit the impact of a compromised wireless device.
   • CTo combine wireless and wired traffic for easier management.
   • DTo increase the wireless signal strength.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company has deployed a WIDS that monitors for rogue access points. The administrator notices that the WIDS is generating false positives because it is detecting neighboring businesses' access points. What should the administrator do to reduce false positives while still detecting rogue APs?

   • AIncrease the sensitivity of the WIDS sensors to detect weaker signals.
   • BDisable the WIDS alerts for all access points that are not broadcasting the corporate SSID.
   • CMove the WIDS sensors to a different location to avoid interference.
   • DCreate a baseline of authorized access points and configure the WIDS to ignore access points that are not in the baseline but are not on the corporate network.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a key benefit of using WPA3 over WPA2 for data confidentiality?

   • AWPA3 eliminates the need for a pre-shared key (PSK).
   • BWPA3 is compatible with all legacy devices.
   • CWPA3 automatically blocks all rogue access points.
   • DWPA3 uses 256-bit encryption and provides stronger protection against offline dictionary attacks.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company's wireless network uses WPA2-Enterprise with 802.1X authentication. The security team wants to detect an evil twin access point that is broadcasting the same SSID but using a different authentication method. Which WIPS capability is most effective for this detection?

   • AComparing the authentication method and certificate details of access points advertising the same SSID.
   • BMeasuring the signal strength of the access point to see if it is stronger than expected.
   • CChecking the MAC address of the access point against a list of approved devices.
   • DMonitoring for deauthentication frames sent to clients on the same channel as the legitimate AP.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which wireless attack is a WIPS specifically designed to detect and prevent by monitoring for unauthorized access points that mimic a legitimate network?

   • APacket sniffing
   • BDeauthentication attack
   • CMAC address spoofing
   • DEvil twin attack
   Reveal Solution Discussion Select an answer first