Bluetooth Threats and Wireless Security Risks EHE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a best practice for securing a wireless network?

   • AUse WEP encryption to maximize compatibility
   • BChange default administrative credentials and use strong authentication
   • CKeep the default SSID and administrative credentials
   • DDisable SSID broadcasting to hide the network
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A small business owner wants to secure their office Wi-Fi. The business has a limited budget and cannot afford a RADIUS server or advanced security appliances. The owner wants to protect against common wireless threats such as rogue APs and packet sniffing. Which set of measures is the most practical and effective given the budget constraint?

   • AUse an open network and rely on a VPN for all traffic
   • BUse WEP with a 128-bit key and disable SSID broadcast
   • CImplement WPA3-Enterprise with 802.1X and a RADIUS server
   • DUse WPA2-Personal with a strong passphrase, change default credentials, and regularly monitor for rogue APs
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A mobile device management (MDM) administrator is updating the security baseline for company-issued smartphones. The goal is to reduce the risk of Bluetooth attacks such as bluesnarfing and bluebugging. Which set of controls should the administrator implement?

   • AUse WPA2 encryption on the Bluetooth connection and change the SSID
   • BSet the device to non-discoverable mode and rely on the default pairing PIN
   • CDisable Bluetooth when not in use, require secure pairing (e.g., passkey confirmation), and keep devices updated
   • DEnable Bluetooth discoverable mode only during business hours and use a simple PIN
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has a wireless network protected by WPA2-PSK. The IT team is concerned about the risk of an attacker setting up a rogue access point with the same SSID to capture credentials. Which additional control is the most effective in mitigating this risk?

   • AUse 802.1X authentication with a RADIUS server
   • BDisable SSID broadcasting
   • CEnable MAC address filtering
   • DUse WPA3-SAE instead of WPA2-PSK
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an inherent security weakness of Bluetooth technology that attackers often exploit?

   • ABluetooth devices are always discoverable by default
   • BBluetooth uses weak encryption by default in all versions
   • CBluetooth has no authentication mechanism
   • DBluetooth pairing can be vulnerable to man-in-the-middle attacks
   Reveal Solution Discussion Select an answer first