Wireless Attack Countermeasures CEH Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A security team discovers a rogue AP that is connected to the wired network and is broadcasting a corporate SSID with a stronger signal than the legitimate APs. The team wants to neutralize the rogue AP without disrupting legitimate users. Which approach is most effective?

   • AAdd the rogue AP's MAC address to a blocklist on the firewall
   • BChange the corporate SSID to a new name
   • CIdentify the switch port the rogue AP is connected to and disable it
   • DUse a WIPS to send deauthentication frames to clients connected to the rogue AP
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company's wireless network uses WPA2-Enterprise. The security team is concerned about an attacker setting up a rogue AP with the same SSID and a fake authentication portal to capture credentials. Which WIPS feature would be most effective in preventing clients from connecting to this rogue AP?

   • AActive containment that sends deauthentication frames to clients attempting to associate with the rogue AP.
   • BConfiguration of the legitimate APs to use a different SSID.
   • CPassive monitoring that logs the rogue AP's MAC address for later review.
   • DRogue AP location tracking using signal strength triangulation.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A security auditor is reviewing the wireless network and discovers that a rogue access point has been operating for several weeks. The administrator claims that the rogue AP was not detected because the WIDS was not configured to alert on new access points. Which policy or process change would most directly prevent this from recurring?

   • ADisable the guest wireless network to reduce the attack surface.
   • BRequire all employees to use a VPN when connecting to the wireless network.
   • CChange the wireless encryption protocol from WPA2 to WPA3.
   • DEstablish a baseline of authorized access points and configure the WIDS to alert on any access point not in the baseline.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company is deploying 802.1X with EAP-TLS for wireless access. They want to ensure that only company-issued devices can connect, but they also need to support a small number of personally owned devices for guests. What is the most effective way to meet both requirements?

   • ADisable 802.1X and use WPA2-Personal with a strong passphrase
   • BUse a separate SSID for guests with a different authentication method, such as a captive portal
   • CIssue certificates to all personal devices as well
   • DUse EAP-PEAP-MSCHAPv2 for all devices
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   An organization is implementing 802.1X with EAP-TLS for wireless authentication. They need to ensure that only company-issued laptops can connect. What additional control should they implement?

   • AUse a strong pre-shared key and share it only with employees
   • BIssue client certificates only to company laptops and configure the RADIUS server to validate certificate revocation
   • CSet the SSID to hidden and require manual configuration
   • DEnable MAC address filtering on the access points
   Reveal Solution Discussion Select an answer first