Wireless Network Fundamentals and Standards NDE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which wireless security protocol introduced the use of AES (Advanced Encryption Standard) for encryption and is widely considered the minimum standard for secure Wi-Fi networks today?

   • AWPA2
   • BWPA3
   • CWPA
   • DWEP
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security auditor is reviewing a wireless network and finds that it uses WEP with a 64-bit key. The auditor recommends upgrading to WPA2 or WPA3. What is the primary reason for this recommendation?

   • AWEP is not compatible with modern access points.
   • BWEP does not support 5 GHz frequency bands.
   • CWEP does not support authentication of users.
   • DWEP uses a static key that can be easily cracked with readily available tools.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A university is deploying a wireless network for students and faculty. The security team requires that all wireless traffic be encrypted and that users be authenticated individually. The network must also support fast roaming for VoIP phones. Which combination of security and roaming features should be implemented?

   • AWPA3-SAE with a shared passphrase and 802.11r.
   • BWPA2-Personal with a shared passphrase and 802.11r.
   • CWPA2-Enterprise with 802.1X and 802.11r fast roaming.
   • DOpen network with captive portal and 802.11r.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is deploying a wireless network for a high-security facility. The security policy requires that all wireless traffic be encrypted and that the network be resistant to offline dictionary attacks. The company also needs to support legacy devices that only support WPA2. Which configuration should be used?

   • ADisable all wireless access and use only wired connections.
   • BUse WPA2-Enterprise with 802.1X and a RADIUS server.
   • CUse WPA2-Personal with a very long passphrase for all devices.
   • DDeploy WPA3-SAE on the main SSID and enable a separate WPA2 SSID for legacy devices with a strong passphrase.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to deploy a wireless network that allows employees to use their personal devices (BYOD) while keeping corporate data secure. The network team decides to create two SSIDs: one for corporate devices and one for guest devices. Which additional configuration is essential to prevent guest devices from accessing corporate resources?

   • APlace the guest SSID on a separate VLAN with a firewall rule blocking access to the corporate VLAN.
   • BUse MAC address filtering to allow only corporate devices on the corporate SSID.
   • CHide the corporate SSID so guests cannot see it.
   • DUse the same VLAN for both SSIDs but enable WPA2 encryption.
   Reveal Solution Discussion Select an answer first