Enterprise Wireless Network Security CND Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is deploying a new enterprise Wi-Fi network for 500 employees using a mix of Windows laptops, Android phones, and iPhones. The security team requires mutual authentication and per-user encryption keys to prevent rogue APs and eavesdropping. Which configuration should the network administrator implement?

   • AOpen network with MAC address filtering
   • BWPA2-PSK with a 16-character passphrase
   • CWPA3-SAE with a 12-character passphrase
   • DWPA2-Enterprise with EAP-TLS and a RADIUS server
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which practice is a recommended hardening measure for enterprise wireless access points?

   • AKeep firmware outdated
   • BEnable WPS for easy setup
   • CUse default administrative credentials
   • DDisable SSID broadcast
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A university is deploying a wireless network that must support both students and faculty. The network must provide high availability and be resilient to attacks. The administrator has a limited budget and must choose between two options: (1) deploying a WIPS with sensors on every AP, or (2) deploying a WIDS with sensors on a subset of APs and implementing strong encryption. Which option is the best trade-off?

   • ADeploy WPA2-Personal and rely on manual monitoring
   • BDeploy a WIPS with sensors on every AP
   • CDeploy an open network with a captive portal
   • DDeploy a WIDS with strategic sensor placement and WPA2-Enterprise
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A small business wants to secure its wireless network without a RADIUS server. The business has about 20 employees and wants to use a simple but secure method. Which option is the best choice?

   • AOpen network with MAC filtering
   • BWPA3-Personal with a short passphrase
   • CWPA2-Personal with a strong passphrase
   • DWEP with a 128-bit key
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A hospital's wireless network has been experiencing intermittent disconnections and slow performance. The security team suspects a deauthentication attack but is unsure. They need to confirm the attack and also identify the source. Which combination of actions is most effective?

   • ADeploy a WIDS to capture deauthentication frames and use triangulation to locate the attacker
   • BDisable the affected access points and restart them
   • CChange the SSID and passphrase
   • DUse a spectrum analyzer to check for interference
   Reveal Solution Discussion Select an answer first