A hospital's medical devices are on a network that is supposed to be air-gapped from the internet. A WIDS alerts on an unknown device that is associating with a wireless access point that is also connected to the medical device network. Which WIDS detection capability is MOST effective at identifying that this is an attempt to bridge the air gap?

Rogue AP detection that flags access points not on the authorized list

Client misassociation detection that flags clients connecting to the wrong network

Spectrum analysis that detects non-802.11 interference

Signal monitoring that measures the received signal strength of the unknown device

A hospital's medical device network is air-gapped from the internet and corporate LAN to protect patient monitors. A nurse brings a personal tablet into a patient room and connects it to the hospital's guest Wi-Fi. The tablet also has a USB-C Ethernet adapter. Which control would most directly prevent this device from bridging the air gap?

Deploy a WIDS that alerts when a device is connected to both guest Wi-Fi and the medical network.

Enforce a policy that prohibits personal devices in patient rooms and conduct random inspections.

Disable the physical Ethernet ports in patient rooms that are connected to the medical device network.

Increase the signal strength of the guest Wi-Fi to ensure better connectivity.

In wireless networking, what does the term 'air gap' specifically refer to?

The physical distance between wireless access points

The encryption gap between the wireless and wired portions of a network

The absence of any network connection between two systems or networks

The use of wireless signals to transmit data over a gap in physical cabling

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 3

Bridging the Air Gap GAWN Practice Questions (Page 2)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

5concepts

Questions 6–10

6application · medium
A hospital's medical devices are on a network that is supposed to be air-gapped from the internet. A WIDS alerts on an unknown device that is associating with a wireless access point that is also connected to the medical device network. Which WIDS detection capability is MOST effective at identifying that this is an attempt to bridge the air gap?
Select an answer first
7application · medium
A hospital's medical device network is air-gapped from the internet and corporate LAN to protect patient monitors. A nurse brings a personal tablet into a patient room and connects it to the hospital's guest Wi-Fi. The tablet also has a USB-C Ethernet adapter. Which control would most directly prevent this device from bridging the air gap?
Select an answer first
8foundation · easy
Which mitigation strategy is specifically designed to prevent wireless signals from extending beyond a facility's physical boundaries?
Select an answer first
9foundation · easy
Which attack vector for bridging an air gap involves an attacker physically entering a secure facility to connect a device to the isolated network?
Select an answer first
10foundation · easy
In wireless networking, what does the term 'air gap' specifically refer to?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Bridging the Air Gap GAWN Practice Questions (Page 2)

Questions 6–10

Which mitigation strategy is specifically designed to prevent wireless signals from extending beyond a facility's physical boundaries?

Which attack vector for bridging an air gap involves an attacker physically entering a secure facility to connect a device to the isolated network?

In wireless networking, what does the term 'air gap' specifically refer to?

Keep studying — Wireless Client and Network Attacks