Enterprise Wireless Network Security CND Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A hospital wants to secure its wireless network for medical devices that do not support 802.1X. The devices are IoT monitors that only support WPA2-PSK. The security team is concerned about shared passphrase leakage. Which control should be implemented to reduce the risk?

   • APlace the IoT devices on a separate VLAN with a unique PSK and no internet access
   • BImplement MAC filtering on the IoT SSID
   • CUse the same SSID and PSK as the employee network for simplicity
   • DDisable encryption on the IoT network to improve compatibility
   Reveal Solution Discussion Select an answer first
2. 22expert · hard · select all that apply

   A security analyst is investigating a possible wireless attack. The analyst observes that a legitimate user's session is being hijacked. Which of the following attacks could be used to achieve session hijacking on a wireless network? (Select all that apply.)

   • AEvil twin attack
   • BWPA2-PSK dictionary attack
   • CKRACK attack
   • DDeauthentication attack followed by a rogue AP
   • EMAC address spoofing
   Check answers Discussion Select an answer first
4. 23application · medium

   A security analyst notices that a wireless client is connected to an access point that is not part of the corporate network. The analyst suspects an evil twin attack. What should the analyst do to confirm the attack?

   • AReview the firewall logs
   • BCheck the client's IP address
   • CCompare the BSSID and signal strength of the suspicious AP with the legitimate AP
   • DDisable the client's wireless adapter
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is deploying a wireless network in a dense office environment with many overlapping access points. The network administrator notices poor performance and intermittent disconnects. Which configuration change would MOST improve reliability?

   • AIncrease transmit power on all access points to improve coverage
   • BSet all access points to the same channel to avoid interference
   • CAssign non-overlapping channels to adjacent access points and reduce transmit power
   • DDisable 5 GHz and use only 2.4 GHz for longer range
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A network defender is investigating a series of wireless disconnects reported by employees. The WIDS logs show a high rate of deauthentication frames originating from a MAC address that is not in the authorized AP list. However, the same MAC address also appears as a legitimate client on the wired network. What is the MOST likely explanation?

   • AThe WIDS is misconfigured and generating false positives
   • BThe legitimate client is malfunctioning and sending deauth frames
   • CThe legitimate client is using a dual-band radio and the MAC address is from the other radio
   • DAn attacker is spoofing the MAC address of a legitimate client to send deauth frames
   Reveal Solution Discussion Select an answer first