Wireless Network Security and Attack Techniques EHE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A network administrator is troubleshooting intermittent connectivity for a user who is far from the access point. The administrator suspects the issue is due to signal attenuation. Which of the following is the most appropriate action to improve the user's connectivity?

   • AAdd an additional access point closer to the user's location.
   • BChange the wireless channel on the access point.
   • CIncrease the transmit power of the existing access point to maximum.
   • DDisable 802.11n and use 802.11g only.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security team is investigating a wireless attack where clients are being redirected to a fake login page. The team suspects an evil twin attack. Which tool would the attacker most likely have used to set up the rogue AP, and what countermeasure would be most effective?

   • AWireshark to create the rogue AP; enable WPA3-SAE.
   • BAircrack-ng suite to create the rogue AP; implement a WIPS to detect and block it.
   • CReaver to create the rogue AP; enable MAC filtering.
   • DKismet to create the rogue AP; disable SSID broadcasting.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which wireless security protocol uses a 128-bit key and is considered cryptographically broken because its RC4-based encryption can be cracked in minutes?

   • AWPA3
   • BWPA2
   • CWPA
   • DWEP
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which countermeasure is most effective in preventing evil twin attacks?

   • AUsing WPA2 with a strong pre-shared key
   • BDisabling SSID broadcast
   • CImplementing 802.1X with client certificates
   • DEnabling MAC address filtering
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is investigating a report of intermittent connectivity issues in a warehouse. During a site survey, the analyst notices a second access point with the same SSID as the corporate network but with a stronger signal in a corner of the building. Employees have been connecting to this stronger signal. Which attack is most likely occurring, and what immediate step should the analyst take?

   • ADeauthentication attack; reconfigure the corporate APs to use WPA3-SAE.
   • BWPS PIN attack; disable WPS on all corporate access points.
   • CMAC spoofing attack; enable MAC filtering on the corporate WLAN.
   • DEvil twin attack; disable the rogue access point and add its BSSID to a blocklist.
   Reveal Solution Discussion Select an answer first