A company is hardening its wireless network. The administrator wants to ensure that only authorized devices can connect and that all communication is encrypted. Which set of controls should be implemented?

Open network with captive portal

WPA2-Personal with a strong passphrase

MAC address filtering and WEP encryption

802.1X with EAP-TLS and device certificates

A network defender suspects an attacker is using a rogue access point to perform an evil twin attack near the company's lobby. The defender needs to detect the rogue AP and identify its location. Which approach should be used?

Review DHCP server logs for unknown IP addresses

Conduct a site survey using a spectrum analyzer

Disable all wireless access points temporarily

Deploy a wireless intrusion prevention system (WIPS) with distributed sensors and triangulation

A security analyst notices that an employee's laptop is connected to a Wi-Fi network with the same SSID as the corporate network but with a much stronger signal than the legitimate APs. The analyst suspects an evil twin attack. What should the analyst do FIRST to confirm the suspicion?

Disable the employee's wireless card immediately

Check the BSSID of the connected AP against the list of authorized APs

A company is deploying a wireless network in a legacy building with thick concrete walls. The network administrator must provide coverage to all offices while minimizing interference between APs. The budget allows for only a limited number of APs. Which approach BEST balances coverage and interference?

Install one high-gain antenna per floor

Conduct a site survey and place APs with overlapping coverage on non-overlapping channels

Place APs only in the center of the building with high transmit power

Use a mesh network with APs placed randomly

EC-CouncilCertified Network Defender

Domain 4Objective 3

Enterprise Wireless Network Security CND Practice Questions (Page 8)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

39questions here

8free pages

5concepts

Questions 36–39

36application · medium
A company is hardening its wireless network. The administrator wants to ensure that only authorized devices can connect and that all communication is encrypted. Which set of controls should be implemented?
Select an answer first
37application · medium
A network defender suspects an attacker is using a rogue access point to perform an evil twin attack near the company's lobby. The defender needs to detect the rogue AP and identify its location. Which approach should be used?
Select an answer first
38application · medium
A security analyst notices that an employee's laptop is connected to a Wi-Fi network with the same SSID as the corporate network but with a much stronger signal than the legitimate APs. The analyst suspects an evil twin attack. What should the analyst do FIRST to confirm the suspicion?
Select an answer first
39expert · hard
A company is deploying a wireless network in a legacy building with thick concrete walls. The network administrator must provide coverage to all offices while minimizing interference between APs. The budget allows for only a limited number of APs. Which approach BEST balances coverage and interference?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Enterprise Wireless Network Security CND Practice Questions (Page 8)

Questions 36–39

A company is hardening its wireless network. The administrator wants to ensure that only authorized devices can connect and that all communication is encrypted. Which set of controls should be implemented?

A network defender suspects an attacker is using a rogue access point to perform an evil twin attack near the company's lobby. The defender needs to detect the rogue AP and identify its location. Which approach should be used?

A security analyst notices that an employee's laptop is connected to a Wi-Fi network with the same SSID as the corporate network but with a much stronger signal than the legitimate APs. The analyst suspects an evil twin attack. What should the analyst do FIRST to confirm the suspicion?

Keep studying — Virtual, Cloud and Wireless Network Security