Wireless Network Security and Attack Techniques EHE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security analyst is investigating a report of intermittent Wi-Fi disconnections affecting multiple users in a single office wing. During the investigation, the analyst discovers a second access point broadcasting the same SSID as the corporate network but with a different BSSID and no WPA2-Enterprise configuration. Several client devices are connected to this unauthorized AP. Which immediate action should the analyst take to stop the active attack?

   • AChange the corporate SSID to a new name and update all client profiles.
   • BIncrease the transmit power of the legitimate access points to override the rogue signal.
   • CConfigure all clients to use a static IP address instead of DHCP.
   • DDisable the unauthorized AP's power source and block its MAC address at the switch port.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is setting up a wireless network in a new office. They want to prevent unauthorized devices from connecting and also prevent casual eavesdropping. They have a limited budget and cannot deploy a RADIUS server. Which combination of settings provides the best security under these constraints?

   • AWEP with a 128-bit key and MAC filtering.
   • BOpen network with a captive portal for authentication.
   • CWPA3-SAE with a short passphrase and enable SSID broadcasting.
   • DWPA2-PSK with a long random passphrase and disable SSID broadcasting.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A large enterprise is experiencing frequent wireless attacks, including rogue APs and deauthentication attacks. The security team wants to implement a solution that can automatically detect and respond to these threats in real time. Which solution is most appropriate?

   • AImplement strong WPA3-Enterprise authentication on all access points.
   • BConduct periodic manual site surveys to identify rogue APs.
   • CUse MAC address filtering to block unauthorized devices.
   • DDeploy a Wireless Intrusion Prevention System (WIPS) that integrates with the existing access points.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is deploying a wireless network in a facility that also has a neighboring business. The security team is concerned about cross-network interference and unauthorized access. They want to ensure that only company devices can connect. Which combination of controls is most effective?

   • AOpen network with a captive portal and MAC filtering.
   • BWPA2-Enterprise with EAP-TLS and a WIPS to detect rogue APs.
   • CWPA2-PSK with a strong passphrase and MAC filtering.
   • DWPA3-SAE with a shared passphrase and disable SSID broadcasting.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is deploying a guest Wi-Fi network for visitors. The security team wants to ensure that guest devices cannot access the corporate network or communicate with each other. Which configuration should be implemented?

   • AEnable MAC address filtering to allow only known guest devices.
   • BPlace the guest network on a separate VLAN with client isolation enabled and no route to the corporate network.
   • CDisable encryption on the guest network for easier access.
   • DUse the same SSID as the corporate network but with a different password.
   Reveal Solution Discussion Select an answer first