DoS on Wireless Networks GAWN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which attack vector for wireless DoS involves an attacker placing an unauthorized access point that broadcasts a strong signal to attract clients, effectively denying service to the legitimate network?

   • AJamming
   • BBeacon flooding
   • CProtocol manipulation
   • DRogue access point
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A wireless DoS attack that continuously deauthenticates all clients on a network primarily impacts which aspect of the CIA triad?

   • AIntegrity
   • BConfidentiality
   • CAvailability
   • DNon-repudiation
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital's wireless network uses WPA2-Enterprise with 802.1X. During a shift change, dozens of nurses report that their laptops repeatedly disconnect and reconnect to the network. A packet capture on the wired side shows a flood of EAPOL-Logoff frames originating from a single MAC address that is not associated with any client. What is the most effective immediate mitigation?

   • ASwitch the network to WPA2-PSK to simplify authentication and reduce EAPOL overhead.
   • BEnable MAC address filtering on the access points to block the spoofed source address.
   • CConfigure the access points to ignore EAPOL-Logoff frames from clients that are not currently authenticated.
   • DIncrease the 802.1X reauthentication timer to reduce the frequency of disconnects.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to protect its wireless network from deauthentication attacks. The company uses WPA2-Enterprise with RADIUS authentication. Which of the following countermeasures is most effective in preventing spoofed deauthentication frames?

   • ADisable SSID broadcast to hide the network.
   • BEnable 802.11w (Protected Management Frames) on all APs.
   • CUse a longer pre-shared key (PSK) for WPA2.
   • DImplement MAC address filtering on the AP.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst notices that clients in a specific area of an office building are repeatedly losing Wi-Fi connectivity. The analyst captures traffic and sees a flood of disassociation frames from an unknown MAC address. The frames are being sent to the access point (AP) with the spoofed source address of a legitimate client. What is the most effective immediate mitigation to stop this specific attack while preserving service for the targeted client?

   • AConfigure the AP to ignore disassociation frames that do not match the AP's association table.
   • BEnable MAC address filtering on the AP to block the unknown MAC address.
   • CDisable SSID broadcast to hide the network from the attacker.
   • DIncrease the AP's transmit power to overcome the attacker's signal.
   Reveal Solution Discussion Select an answer first