Wireless Network Security and Attack Techniques EHE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security analyst is investigating a suspected rogue access point. The analyst has identified an unknown AP with a strong signal in a conference room. The AP is broadcasting the same SSID as the corporate network but is not connected to the wired network. Which of the following is the most likely attack, and what is the best immediate response?

   • ADeauthentication attack; change the corporate SSID to a new name.
   • BWPS attack; disable WPS on all corporate APs.
   • CMAC spoofing attack; enable MAC filtering on the corporate network.
   • DEvil twin attack; use a WIPS to locate and block the rogue AP's signal.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which authentication method is commonly used in WPA2-Enterprise to provide per-user credentials via a RADIUS server?

   • AMAC address filtering
   • BPre-shared key (PSK)
   • CWPS PIN
   • D802.1X/EAP
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team is investigating a suspected wireless attack. They notice that a legitimate employee's laptop is connected to an access point with the same SSID as the corporate network, but the BSSID is different. The employee reports that they were prompted to enter their domain credentials after connecting. Which attack is most likely occurring, and what is the best immediate response?

   • AWPS PIN attack; disable WPS on the corporate access points.
   • BKRACK attack; update the employee's laptop with the latest patches.
   • CDeauthentication attack; restart the employee's laptop to clear the connection.
   • DEvil twin attack; disconnect the employee from the rogue AP and have them change their domain password.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A small business wants to secure its office Wi-Fi network. The owner is concerned about eavesdropping and unauthorized access. The office has a mix of older laptops (some only support WPA2) and newer smartphones. Which configuration provides the strongest security while maintaining compatibility with all devices?

   • AEnable WPA3-Personal only and require all devices to support it.
   • BKeep WPA2-PSK with a strong passphrase.
   • CEnable WPA3-Personal with transition mode, allowing WPA2 devices to connect.
   • DDisable encryption and use MAC address filtering.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security auditor is reviewing a wireless network that uses WPA2-Enterprise with PEAP-MSCHAPv2. The auditor is concerned about credential theft. Which attack is most likely to succeed against this configuration, and what is the best mitigation?

   • AWPS attack to recover the PIN; disable WPS.
   • BEvil twin attack to capture MSCHAPv2 credentials; deploy EAP-TLS with client certificates.
   • CDeauthentication attack to force reconnection; enable WPA3-SAE.
   • DMAC spoofing to bypass authentication; enable MAC filtering.
   Reveal Solution Discussion Select an answer first