Bluetooth Threats and Wireless Security Risks EHE Practice Questions (Page 4)

Questions 16–20

1. 16application · easy

   A small business has a wireless router with default credentials. The owner wants to improve security quickly. Which action should be taken first?

   • AEnable MAC address filtering
   • BSet the router to use WEP encryption
   • CChange the default administrator username and password
   • DDisable SSID broadcasting
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a rogue access point?

   • AAn access point that is used for packet sniffing
   • BAn access point that is configured with weak encryption
   • CAn access point that uses a different SSID than the corporate network
   • DAn unauthorized access point installed on a network without permission
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which wireless attack involves an attacker setting up a fake access point that mimics a legitimate one to intercept data?

   • AEvil twin
   • BBluejacking
   • CRogue access point
   • DPacket sniffing
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A network administrator discovers that an employee has set up a personal wireless router in their office, connected to the corporate network, to get a stronger signal. The administrator identifies this as a rogue access point. What is the primary security risk of this rogue AP, and what is the immediate remediation?

   • AIt creates an evil twin; reconfigure the rogue AP to use WPA2
   • BIt allows packet sniffing on the corporate network; disable the rogue AP's SSID broadcast
   • CIt bypasses corporate security controls; remove the rogue AP and enforce a policy against unauthorized devices
   • DIt weakens the wireless encryption; change the corporate network's WPA2 key
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security auditor is reviewing the use of Bluetooth headsets by employees in an open-plan office. During the review, the auditor discovers that several employees have left their headsets in pairing mode while at their desks. Which attack is the auditor most likely concerned about in this situation?

   • APacket sniffing, because the attacker can capture Bluetooth traffic between the headset and the phone.
   • BBluesnarfing, because the attacker can pair with the headset and access data on the paired phone.
   • CBluejacking, because the attacker can send unsolicited messages to the headset.
   • DBluebugging, because the attacker can establish a connection and take control of the headset's functions.
   Reveal Solution Discussion Select an answer first