A security analyst is investigating a report of intermittent Wi-Fi disconnections in a warehouse. The analyst discovers a second access point with the same SSID as the corporate network but with a different MAC address, broadcasting from a nearby office. Employees' devices are associating with this second AP. Which attack is occurring, and what immediate countermeasure should the analyst recommend?

Deauthentication attack; increase the transmit power of corporate APs

Rogue AP attack; disable SSID broadcasting on all corporate APs

Jamming attack; move the corporate APs to a different channel

Evil twin attack; configure the corporate APs to use WPA2-Enterprise with 802.1X authentication

A small business wants to secure its Wi-Fi network. The owner has a mix of legacy devices that only support WEP and newer devices that support WPA2. The business cannot replace the legacy devices immediately. Which configuration provides the best security while maintaining compatibility?

Enable WPA2 with AES and disable WEP entirely

Set up a separate guest network for legacy devices using WEP, and use WPA2-AES for the main network

Use WPA2 with TKIP as a fallback

Use WEP with a long, complex key

A company is upgrading its wireless network and wants to ensure the highest level of security. They have a mix of devices, some of which are older and do not support WPA3. Which configuration provides the best security while maintaining compatibility?

Use WPA2/WPA3 mixed mode with AES encryption

A network administrator is setting up a new wireless network for a branch office. The office has a mix of modern laptops and older IoT devices that only support 2.4 GHz. The administrator wants to maximize compatibility while ensuring a baseline level of security that is not easily cracked. Which configuration should be used?

Enable 802.11ac on 5 GHz with WPA3-Personal

Enable 802.11n on 2.4 GHz with WPA2-Personal and a strong passphrase

Enable 802.11b on 2.4 GHz with WEP

Enable 802.11ax on 6 GHz with WPA3-Enterprise

A penetration tester is conducting a wireless assessment for a client. The tester needs to identify all access points and clients in the area, including those not broadcasting their SSID, and capture the initial handshake from a target WPA2 network. Which sequence of tools should the tester use to accomplish these tasks?

Use Kismet to capture the handshake and then Aircrack-ng to discover hidden SSIDs

Use Wireshark to discover hidden SSIDs and then use Kismet to capture the handshake

Use Aircrack-ng for discovery and then Wireshark to crack the handshake

Use Kismet for discovery and then Aircrack-ng suite to capture and analyze the handshake

EC-CouncilCertified Security Specialist

Domain 4Objective 3

Wireless Attacks and Countermeasures ECSS Practice Questions (Page 5)

Part of the Ethical Hacking Advanced Attacks and Penetration Testing domain, which makes up ~17% of our current practice bank.

39questions here

8free pages

6concepts

Questions 21–25

21application · medium
A security analyst is investigating a report of intermittent Wi-Fi disconnections in a warehouse. The analyst discovers a second access point with the same SSID as the corporate network but with a different MAC address, broadcasting from a nearby office. Employees' devices are associating with this second AP. Which attack is occurring, and what immediate countermeasure should the analyst recommend?
Select an answer first
22application · medium
A small business wants to secure its Wi-Fi network. The owner has a mix of legacy devices that only support WEP and newer devices that support WPA2. The business cannot replace the legacy devices immediately. Which configuration provides the best security while maintaining compatibility?
Select an answer first
23expert · hard
A company is upgrading its wireless network and wants to ensure the highest level of security. They have a mix of devices, some of which are older and do not support WPA3. Which configuration provides the best security while maintaining compatibility?
Select an answer first
24application · medium
A network administrator is setting up a new wireless network for a branch office. The office has a mix of modern laptops and older IoT devices that only support 2.4 GHz. The administrator wants to maximize compatibility while ensuring a baseline level of security that is not easily cracked. Which configuration should be used?
Select an answer first
25application · medium
A penetration tester is conducting a wireless assessment for a client. The tester needs to identify all access points and clients in the area, including those not broadcasting their SSID, and capture the initial handshake from a target WPA2 network. Which sequence of tools should the tester use to accomplish these tasks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Wireless Attacks and Countermeasures ECSS Practice Questions (Page 5)

Questions 21–25

A small business wants to secure its Wi-Fi network. The owner has a mix of legacy devices that only support WEP and newer devices that support WPA2. The business cannot replace the legacy devices immediately. Which configuration provides the best security while maintaining compatibility?

A company is upgrading its wireless network and wants to ensure the highest level of security. They have a mix of devices, some of which are older and do not support WPA3. Which configuration provides the best security while maintaining compatibility?

Keep studying — Ethical Hacking Advanced Attacks and Penetration Testing