A company is migrating from WPA2-Enterprise to WPA3-Enterprise. The network has a mix of devices, some of which do not support WPA3. The security team wants to maintain strong security while allowing all devices to connect. Which configuration should be used?

Use WPA2-Enterprise with TKIP for compatibility

Use WPA3-SAE with a transition mode

Enable WPA3-Enterprise in transition mode with WPA2-Enterprise

Use WPA3-Enterprise only and require device upgrades

An organization is planning to deploy a wireless network in a large office. The network must support many users and provide reliable coverage. The administrator needs to decide on the placement and configuration of access points. Which approach is most effective?

Use a single high-gain antenna to cover the entire office

Install APs in the ceiling without planning

Place APs in a central location with high transmit power

Conduct a site survey and place APs to minimize overlap while ensuring coverage

A company is deploying a wireless network for a branch office. The security policy requires that all wireless traffic be encrypted and that the network be resilient to rogue APs. Which two controls should be implemented together?

Open network with a captive portal

WPA2-Enterprise with 802.1X and a WIPS

During a wireless penetration test, a security analyst captures 4-way handshake frames from a WPA2-PSK network. The analyst then runs an offline dictionary attack and successfully recovers the passphrase. Which additional control would BEST mitigate this type of attack?

Increase the beacon interval to reduce handshake captures

Use WPA3-SAE with a strong passphrase

Implement MAC filtering on the access point

EC-CouncilCertified Network Defender

Domain 4Objective 3

Enterprise Wireless Network Security CND Practice Questions (Page 1)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

39questions here

8free pages

5concepts

Questions 1–5

1expert · hard
A company is migrating from WPA2-Enterprise to WPA3-Enterprise. The network has a mix of devices, some of which do not support WPA3. The security team wants to maintain strong security while allowing all devices to connect. Which configuration should be used?
Select an answer first
2application · medium
An organization is planning to deploy a wireless network in a large office. The network must support many users and provide reliable coverage. The administrator needs to decide on the placement and configuration of access points. Which approach is most effective?
Select an answer first
3foundation · easy
Which wireless attack involves sending continuous deauthentication frames to disconnect clients from a legitimate access point, causing a denial of service?
Select an answer first
4application · medium
A company is deploying a wireless network for a branch office. The security policy requires that all wireless traffic be encrypted and that the network be resilient to rogue APs. Which two controls should be implemented together?
Select an answer first
5application · medium
During a wireless penetration test, a security analyst captures 4-way handshake frames from a WPA2-PSK network. The analyst then runs an offline dictionary attack and successfully recovers the passphrase. Which additional control would BEST mitigate this type of attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.