A company has deployed a wireless network with WPA2-Enterprise. The security team wants to prevent credential theft from evil twin attacks. Which additional control is most effective?

Configure clients to validate the RADIUS server certificate

Which countermeasure is specifically designed to detect the presence of rogue access points on a network?

Wireless intrusion prevention system (WIPS)

A security administrator notices that several employees are connecting to a Wi-Fi network with the same SSID as the corporate network, but the signal strength is stronger than the legitimate access points. The administrator suspects an evil twin attack. What is the most effective way to confirm this suspicion?

Increase the transmit power of the corporate APs

Ask employees to forget the network and reconnect

Check the MAC address of the access point and compare it to the known corporate APs

Disable the SSID broadcast on the corporate network

A company has deployed a wireless network and wants to prevent attackers from setting up rogue access points that impersonate the corporate SSID. Which countermeasure is most effective?

Set a strong pre-shared key (PSK)

Enable WPA2-Enterprise with 802.1X authentication

EC-CouncilCertified Security Specialist

Domain 4Objective 3

Wireless Attacks and Countermeasures ECSS Practice Questions (Page 4)

Part of the Ethical Hacking Advanced Attacks and Penetration Testing domain, which makes up ~17% of our current practice bank.

39questions here

8free pages

6concepts

Questions 16–20

16expert · hard
A company has deployed a wireless network with WPA2-Enterprise. The security team wants to prevent credential theft from evil twin attacks. Which additional control is most effective?
Select an answer first
17foundation · easy
Which countermeasure is specifically designed to detect the presence of rogue access points on a network?
Select an answer first
18application · medium
A security administrator notices that several employees are connecting to a Wi-Fi network with the same SSID as the corporate network, but the signal strength is stronger than the legitimate access points. The administrator suspects an evil twin attack. What is the most effective way to confirm this suspicion?
Select an answer first
19application · medium
A company has deployed a wireless network and wants to prevent attackers from setting up rogue access points that impersonate the corporate SSID. Which countermeasure is most effective?
Select an answer first
20foundation · easy
Which wireless encryption protocol uses a 128-bit key and is considered cryptographically broken because its key can be recovered by capturing enough IVs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Wireless Attacks and Countermeasures ECSS Practice Questions (Page 4)

Questions 16–20

A company has deployed a wireless network with WPA2-Enterprise. The security team wants to prevent credential theft from evil twin attacks. Which additional control is most effective?

Which countermeasure is specifically designed to detect the presence of rogue access points on a network?

A company has deployed a wireless network and wants to prevent attackers from setting up rogue access points that impersonate the corporate SSID. Which countermeasure is most effective?

Which wireless encryption protocol uses a 128-bit key and is considered cryptographically broken because its key can be recovered by capturing enough IVs?

Keep studying — Ethical Hacking Advanced Attacks and Penetration Testing