Wireless Network Security and Attack Techniques EHE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security analyst is investigating a wireless attack where an attacker is sending continuous deauthentication frames to all clients on a corporate WPA2-Enterprise network. The analyst wants to identify the source of the attack. Which tool or technique would be most effective for this task?

   • AUse a spectrum analyzer to detect the physical location of the attacker.
   • BCheck the access point logs for authentication failures.
   • CUse a wireless packet analyzer to capture frames and identify the source MAC address of the deauthentication frames.
   • DReview the RADIUS server logs for unusual activity.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A network administrator is troubleshooting poor Wi-Fi performance in a crowded office. The administrator suspects that neighboring businesses are using the same wireless channels, causing interference. Which 802.11 feature should the administrator use to automatically select the best channel?

   • AMultiple Input Multiple Output (MIMO)
   • BBeamforming
   • CDynamic Frequency Selection (DFS)
   • DAutomatic Channel Selection (ACS)
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   During a wireless site survey, an auditor notices an unknown access point named 'FreeCoffeeWiFi' with a strong signal in the lobby of a corporate building. The corporate network uses WPA2-Enterprise. Several visitors are connected to this AP. What is the most likely attack being performed, and what is the best countermeasure?

   • AWPA2 handshake capture; change the corporate SSID to something less common.
   • BEvil twin attack; implement a wireless intrusion prevention system (WIPS) to detect and block rogue APs.
   • CDeauthentication attack; increase the transmit power of corporate APs.
   • DMAC spoofing attack; enable MAC address filtering on the corporate network.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An attacker sets up a wireless access point with the same SSID as a legitimate network to trick users into connecting. What is this attack called?

   • AEvil twin
   • BRogue access point
   • CDeauthentication attack
   • DJamming attack
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which wireless tool is primarily used for passive detection, packet capture, and monitoring of wireless networks, and can also detect rogue access points?

   • AJohn the Ripper
   • BKismet
   • CReaver
   • DAircrack-ng
   Reveal Solution Discussion Select an answer first