Bridging the Air Gap GAWN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is 'client misassociation' in the context of bridging an air gap?

   • AA client device accidentally or intentionally connects to an access point that is not part of its intended network
   • BA client device is physically moved from one network to another
   • CAn attacker uses a directional antenna to intercept wireless signals from a distant network
   • DA network administrator configures a client to use the wrong encryption settings
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A utility company has a control system network that is air-gapped from the corporate network. An employee, unaware of the policy, plugs a personal wireless router into the control network to get internet access in the control room. The router is also connected to the corporate network via a second interface. What is this an example of?

   • AA social engineering attack.
   • BA rogue access point bridging the air gap.
   • CA wireless bridge attack.
   • DA client misassociation attack.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of an air gap in a wireless network context?

   • ATo provide wireless connectivity to devices in a secure facility
   • BTo encrypt all wireless traffic to ensure confidentiality
   • CTo monitor wireless signals for intrusion attempts
   • DTo physically separate a network from other networks to prevent unauthorized access
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company's air-gapped network is in a building that also has a guest Wi-Fi network. An attacker uses a laptop with two wireless cards: one connects to the guest Wi-Fi, and the other connects to a rogue AP that is plugged into the air-gapped network. This setup creates a bridge between the two networks. Which detection method would be MOST effective at identifying this type of attack?

   • AUsing a spectrum analyzer to detect the rogue AP's signal
   • BReviewing the guest Wi-Fi's DHCP logs for unusual IP addresses
   • CDeploying a WIDS that monitors for clients associated with multiple APs simultaneously
   • DConducting a site survey to map the RF coverage of the guest Wi-Fi
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A research institute's air-gapped network is protected by a strict policy that prohibits any wireless devices. However, a recent audit found that a researcher had installed a personal wireless router to connect a lab instrument to the internet for firmware updates. The router was connected to both the air-gapped network and the internet. Which combination of factors made this air gap bridging possible?

   • AWireless signal interception and the lack of RF shielding
   • BSocial engineering of the researcher and the lack of a security awareness program
   • CPhysical access to the network and the absence of technical controls to prevent unauthorized device installation
   • DA misconfigured firewall and the absence of a WIDS
   Reveal Solution Discussion Select an answer first