A company has a single flat wireless network. After a security incident, the administrator wants to segment the network to limit the impact of a compromised wireless device. The administrator also wants to maintain the ability to detect rogue access points. Which approach should be taken?

Keep the flat network but deploy a WIPS to actively block rogue access points.

Create multiple VLANs for different user groups and deploy a WIDS to monitor for rogue access points.

Use a single VLAN but implement MAC address filtering to control which devices can connect.

Disable the wireless network and require all users to use wired connections.

A security analyst is deploying a wireless monitoring system that will alert on suspicious activities such as deauthentication floods and evil twin APs, but the analyst does not want the system to automatically block or disconnect clients. Which type of system should they deploy?

Wireless intrusion prevention system (WIPS)

Wireless intrusion detection system (WIDS)

A company's wireless network has been compromised through a rogue access point that was not detected for several months. The post-incident review finds that the WIDS was not properly configured and that there was no regular audit process. Which combination of changes would most effectively prevent a recurrence?

Change the wireless encryption to WPA3 and require all users to use a VPN.

Replace the WIDS with a WIPS that automatically blocks all unknown access points.

Configure the WIDS to alert on any new access point and schedule quarterly wireless security audits.

Disable the wireless network and require all employees to use wired connections.

Once a rogue access point has been identified, which of the following is an appropriate mitigation step?

Increasing the transmit power of legitimate APs

Disabling the rogue AP's switch port

Changing the SSID of the legitimate network

Enabling MAC filtering on the legitimate network

EC-CouncilCertified Ethical Hacker

Domain 6Objective 4

Wireless Attack Countermeasures CEH Practice Questions (Page 8)

Part of the Wireless Network Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 36–40

36foundation · easy
Which of the following is a category of wireless attack countermeasures?
Select an answer first
37expert · hard
A company has a single flat wireless network. After a security incident, the administrator wants to segment the network to limit the impact of a compromised wireless device. The administrator also wants to maintain the ability to detect rogue access points. Which approach should be taken?
Select an answer first
38application · medium
A security analyst is deploying a wireless monitoring system that will alert on suspicious activities such as deauthentication floods and evil twin APs, but the analyst does not want the system to automatically block or disconnect clients. Which type of system should they deploy?
Select an answer first
39expert · hard
A company's wireless network has been compromised through a rogue access point that was not detected for several months. The post-incident review finds that the WIDS was not properly configured and that there was no regular audit process. Which combination of changes would most effectively prevent a recurrence?
Select an answer first
40foundation · easy
Once a rogue access point has been identified, which of the following is an appropriate mitigation step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Wireless Attack Countermeasures CEH Practice Questions (Page 8)

Questions 36–40

Which of the following is a category of wireless attack countermeasures?

A company has a single flat wireless network. After a security incident, the administrator wants to segment the network to limit the impact of a compromised wireless device. The administrator also wants to maintain the ability to detect rogue access points. Which approach should be taken?

A security analyst is deploying a wireless monitoring system that will alert on suspicious activities such as deauthentication floods and evil twin APs, but the analyst does not want the system to automatically block or disconnect clients. Which type of system should they deploy?

Once a rogue access point has been identified, which of the following is an appropriate mitigation step?

Keep studying — Wireless Network Hacking