A university research lab has an air-gapped network for sensitive experiments. A graduate student connects their laptop to the air-gapped network via Ethernet for data transfer, but the laptop also has Wi-Fi enabled and automatically connects to the university's open guest network. What is the most immediate risk?

The air-gapped network's data will be automatically backed up to the cloud.

The laptop acts as a bridge between the air-gapped network and the guest network, allowing unauthorized access.

The laptop's Wi-Fi will interfere with the lab's other wireless devices.

The guest network's open nature will cause the laptop to be infected with malware.

A research lab maintains an air-gapped network for proprietary algorithms. The lab is located in a building with shared office space on the other side of a thin wall. The security team wants to prevent wireless bridging via rogue access points that might be placed near the wall. Which mitigation strategy would be most effective in this specific environment?

Install RF-shielding material on the lab's walls and around the network equipment.

Enforce a policy that prohibits personal wireless devices in the lab.

Use strong encryption on the air-gapped network's wired connections.

Deploy a WIDS to monitor for rogue access points and alert the security team.

A data center's management network is air-gapped from the public internet. The security team wants to detect any attempt to bridge the air gap using a rogue access point. Which detection method would be MOST effective?

Reviewing firewall logs for unusual outbound traffic

Using a spectrum analyzer to detect non-802.11 interference

Deploying a WIDS that monitors for unauthorized access points

Conducting periodic physical inspections of the facility

A government agency operates a highly sensitive network in a building that is shared with other tenants. The network is air-gapped, but the agency wants to prevent wireless signals from leaking outside their controlled area. Which mitigation strategy would be MOST effective at containing the RF signal?

Using MAC address filtering on all wireless access points

Enforcing a strict policy that prohibits personal wireless devices

Installing RF-shielding materials in the walls and windows of the controlled area

Deploying a WIDS to monitor for rogue access points

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 3

Bridging the Air Gap GAWN Practice Questions (Page 6)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

5concepts

Questions 26–30

26application · medium
A university research lab has an air-gapped network for sensitive experiments. A graduate student connects their laptop to the air-gapped network via Ethernet for data transfer, but the laptop also has Wi-Fi enabled and automatically connects to the university's open guest network. What is the most immediate risk?
Select an answer first
27application · medium
A research lab maintains an air-gapped network for proprietary algorithms. The lab is located in a building with shared office space on the other side of a thin wall. The security team wants to prevent wireless bridging via rogue access points that might be placed near the wall. Which mitigation strategy would be most effective in this specific environment?
Select an answer first
28foundation · easy
Which technique involves an attacker installing an unauthorized wireless access point that is connected to a wired network, thereby creating a bridge across an air gap?
Select an answer first
29application · medium
A data center's management network is air-gapped from the public internet. The security team wants to detect any attempt to bridge the air gap using a rogue access point. Which detection method would be MOST effective?
Select an answer first
30application · medium
A government agency operates a highly sensitive network in a building that is shared with other tenants. The network is air-gapped, but the agency wants to prevent wireless signals from leaking outside their controlled area. Which mitigation strategy would be MOST effective at containing the RF signal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Bridging the Air Gap GAWN Practice Questions (Page 6)

Questions 26–30

Which technique involves an attacker installing an unauthorized wireless access point that is connected to a wired network, thereby creating a bridge across an air gap?

A data center's management network is air-gapped from the public internet. The security team wants to detect any attempt to bridge the air gap using a rogue access point. Which detection method would be MOST effective?

Keep studying — Wireless Client and Network Attacks