Wireless Network Security ECSS Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following best describes the role of an access point (AP) in an infrastructure-mode wireless network?

   • AIt performs deep packet inspection to block malicious traffic on the wireless network.
   • BIt connects wireless clients to a wired network and coordinates communication between them.
   • CIt assigns IP addresses to wireless clients using DHCP.
   • DIt encrypts all traffic between two wireless clients without involving a wired network.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security analyst is tasked with auditing the wireless network for unauthorized devices and potential attacks. Which tool should the analyst use to capture and analyze wireless traffic to detect rogue access points and deauthentication attacks?

   • ANetstat to view active connections
   • BNmap with a ping sweep
   • CWireshark with a wireless adapter in monitor mode
   • DTraceroute to map network paths
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security analyst is investigating a possible rogue AP. The analyst has captured wireless traffic and sees an AP with a MAC address that is not in the authorized list. However, the AP is broadcasting the same SSID as the corporate network. What should the analyst do NEXT to confirm whether it is a rogue AP or a legitimate AP that was recently added?

   • AIgnore the AP because it has the same SSID
   • BChange the corporate SSID to a new name
   • CImmediately disconnect the AP from the network
   • DCheck the AP's MAC address against the official inventory and recent change requests
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which wireless encryption protocol is the first to use Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks?

   • AWPA3
   • BWPA2
   • CWPA
   • DWEP
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A security analyst notices that a legitimate client is being repeatedly disconnected from the wireless network. The analyst captures traffic and sees a large number of deauthentication frames from an unknown MAC address. What is the MOST effective mitigation?

   • AUse a WIPS to detect and block the attacking MAC address
   • BIncrease the transmit power of the access point
   • CDisable the client's wireless adapter
   • DChange the SSID of the network
   Reveal Solution Discussion Select an answer first