Enterprise Wireless Network Security CND Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which component in an enterprise wireless network is responsible for converting data frames between the wired and wireless domains and typically connects to the distribution system?

   • AWireless client adapter
   • BAccess point
   • CWireless controller
   • DDistribution system switch
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security analyst is investigating a report of slow wireless performance and frequent disconnections. The analyst suspects a denial-of-service attack. Which type of attack is most likely causing these symptoms?

   • AEvil twin attack
   • BRogue AP attack
   • CMAC spoofing attack
   • DDeauthentication attack
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company's wireless network was attacked, and the attacker used a rogue AP to intercept credentials. The security team wants to prevent this from happening again. The team has identified that the rogue AP was connected to the wired network. Which control is most effective in preventing rogue APs?

   • ADisable the SSID broadcast
   • BUse MAC address filtering on the wireless network
   • CEnable 802.1X on the wired switch ports
   • DIncrease the transmit power of legitimate APs
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A network defender is configuring a WIDS to detect rogue APs. The WIDS is currently set to alert on any AP that is not in the authorized list. However, the defender is receiving many false positives from neighboring businesses. Which action would BEST reduce false positives while maintaining detection capability?

   • AOnly alert on APs that are broadcasting the corporate SSID
   • BAdd neighboring APs to an exception list based on their BSSID and SSID
   • CIncrease the sensitivity of the WIDS sensors
   • DDisable alerts for all unknown APs
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a best practice for securing enterprise wireless network infrastructure?

   • AImplementing rogue AP detection
   • BUsing WEP for encryption
   • CSharing the same SSID for all VLANs
   • DPlacing APs outside the firewall
   Reveal Solution Discussion Select an answer first