A hospital's air-gapped network for medical devices is in a building that also has a public Wi-Fi network. The security team deploys a WIDS, but it is not integrated with the wired network's switch logs. An attacker deploys a rogue AP that is connected to the air-gapped network. Which limitation of the WIDS deployment would MOST hinder the detection of this air gap bridge?

The WIDS is not configured to detect hidden SSIDs

The WIDS is not monitoring the 5 GHz band

The WIDS is not using a dedicated sensor

The WIDS cannot correlate wireless activity with wired network connections

A government agency's air-gapped network is in a building that also houses a public café. The agency wants to prevent any wireless signals from leaving the classified area, but they also need to allow employees to use wireless headphones inside the area. Which mitigation strategy would be MOST effective?

Deploying a WIDS that monitors for unauthorized wireless devices

Implementing a policy that prohibits all wireless devices, including headphones

Using a Faraday cage around each employee's desk

Installing RF-shielding wallpaper in the classified area and enforcing a policy that only Bluetooth devices with a limited range are allowed

A corporate research facility has an air-gapped network for product development. The facility is in a building with multiple tenants. The security team wants to prevent wireless bridging via rogue APs that could be placed by other tenants. Which mitigation strategy would be most effective?

Conduct regular physical inspections of the facility for unauthorized devices.

Deploy a WIDS that monitors for rogue APs and alerts the security team.

Use RF-shielding paint or foil on the walls of the research facility.

Enforce a policy that prohibits wireless devices in the facility.

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 3

Bridging the Air Gap GAWN Practice Questions (Page 7)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

5concepts

Questions 31–33

31expert · hard
A hospital's air-gapped network for medical devices is in a building that also has a public Wi-Fi network. The security team deploys a WIDS, but it is not integrated with the wired network's switch logs. An attacker deploys a rogue AP that is connected to the air-gapped network. Which limitation of the WIDS deployment would MOST hinder the detection of this air gap bridge?
Select an answer first
32expert · hard
A government agency's air-gapped network is in a building that also houses a public café. The agency wants to prevent any wireless signals from leaving the classified area, but they also need to allow employees to use wireless headphones inside the area. Which mitigation strategy would be MOST effective?
Select an answer first
33application · medium
A corporate research facility has an air-gapped network for product development. The facility is in a building with multiple tenants. The security team wants to prevent wireless bridging via rogue APs that could be placed by other tenants. Which mitigation strategy would be most effective?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Bridging the Air Gap GAWN Practice Questions (Page 7)

Questions 31–33

A corporate research facility has an air-gapped network for product development. The facility is in a building with multiple tenants. The security team wants to prevent wireless bridging via rogue APs that could be placed by other tenants. Which mitigation strategy would be most effective?

Keep studying — Wireless Client and Network Attacks