A defense contractor maintains a classified network in a building with no wireless connectivity. During a routine audit, a security analyst discovers an unknown wireless access point broadcasting a corporate SSID from inside the building's network closet. The analyst suspects an attacker bridged the air gap. Which detection method would MOST directly confirm that the unknown AP is actively bridging traffic between the wireless and wired networks?

Performing a site survey to map the RF coverage of the unknown AP

Checking the unknown AP's firmware version for known vulnerabilities

Using a spectrum analyzer to identify the channel width of the unknown AP

Reviewing the wired switch logs for MAC addresses associated with the unknown AP's BSSID

What is the primary function of a Wireless Intrusion Detection System (WIDS) in detecting air gap bridging attempts?

It physically blocks wireless signals from leaving the facility

It encrypts all wireless traffic to prevent eavesdropping

It manages the configuration of authorized access points

It monitors the radio frequency spectrum for unauthorized access points and suspicious wireless activity

A manufacturing plant has an air-gapped network for robotic control systems. A technician, needing to update the robots, connects a laptop to the air-gapped network via Ethernet. The laptop also has a cellular hotspot enabled. What is the most significant security risk?

The cellular hotspot will interfere with the robots' wireless signals.

The technician will be unable to access the internet while connected to the air-gapped network.

The laptop's Ethernet connection will be slower than the cellular connection.

The laptop bridges the air gap by providing a path from the air-gapped network to the internet via the cellular hotspot.

What is the primary purpose of access controls in mitigating air gap bridging?

To encrypt data transmitted over the wireless network

To physically block wireless signals from leaving the building

To monitor network traffic for suspicious activity

To restrict which devices and users are allowed to connect to the network

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 3

Bridging the Air Gap GAWN Practice Questions (Page 5)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

5concepts

Questions 21–25

21application · medium
A defense contractor maintains a classified network in a building with no wireless connectivity. During a routine audit, a security analyst discovers an unknown wireless access point broadcasting a corporate SSID from inside the building's network closet. The analyst suspects an attacker bridged the air gap. Which detection method would MOST directly confirm that the unknown AP is actively bridging traffic between the wireless and wired networks?
Select an answer first
22foundation · easy
What is the primary function of a Wireless Intrusion Detection System (WIDS) in detecting air gap bridging attempts?
Select an answer first
23application · medium
A manufacturing plant has an air-gapped network for robotic control systems. A technician, needing to update the robots, connects a laptop to the air-gapped network via Ethernet. The laptop also has a cellular hotspot enabled. What is the most significant security risk?
Select an answer first
24foundation · easy
What is the primary purpose of access controls in mitigating air gap bridging?
Select an answer first
25foundation · easy
Which detection method involves analyzing radio frequency (RF) patterns to identify unusual signals that may indicate an attempt to bridge an air gap?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Bridging the Air Gap GAWN Practice Questions (Page 5)

Questions 21–25

What is the primary function of a Wireless Intrusion Detection System (WIDS) in detecting air gap bridging attempts?

A manufacturing plant has an air-gapped network for robotic control systems. A technician, needing to update the robots, connects a laptop to the air-gapped network via Ethernet. The laptop also has a cellular hotspot enabled. What is the most significant security risk?

What is the primary purpose of access controls in mitigating air gap bridging?

Which detection method involves analyzing radio frequency (RF) patterns to identify unusual signals that may indicate an attempt to bridge an air gap?

Keep studying — Wireless Client and Network Attacks