DoS on Wireless Networks GAWN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's wireless network uses WPA2-Enterprise. An attacker is using a tool to send forged deauthentication frames to disconnect users. The company wants to mitigate this attack without changing the authentication method. Which configuration change is most effective?

   • AEnable 802.11w (Management Frame Protection) on the access points and clients.
   • BUse MAC address filtering to allow only known clients.
   • CDisable SSID broadcast to make the network less visible to attackers.
   • DIncrease the beacon interval to reduce the number of management frames.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which wireless denial-of-service attack involves sending forged management frames to force a client to reconnect, often causing repeated authentication handshakes?

   • ADeauthentication attack
   • BBeacon flooding
   • CDisassociation attack
   • DRogue AP attack
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst is investigating a wireless DoS incident. The analyst sees a high rate of beacon frames from an unknown SSID. Which tool would be most useful to confirm the attack?

   • AA wireless packet capture tool such as Wireshark
   • BA RADIUS server log
   • CA network scanner such as Nmap
   • DA spectrum analyzer
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator notices that clients on a corporate Wi-Fi network are experiencing intermittent disconnects. A wireless packet capture shows a large number of disassociation frames from a MAC address that does not match any access point in the environment. What is the most likely explanation?

   • AThe access point is rebooting and sending disassociation frames to all clients.
   • BThe network is experiencing RF interference from a non-Wi-Fi device.
   • CA client is malfunctioning and sending disassociation frames to itself.
   • DAn attacker is spoofing the access point's MAC address to send disassociation frames to clients.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A hospital's wireless network experiences intermittent deauthentication attacks that disconnect medical devices for a few seconds at a time. The attacks occur randomly throughout the day. Which of the following is the most significant potential impact of this type of intermittent DoS attack on patient safety?

   • ACorruption of data stored on the medical devices.
   • BLoss of confidentiality of patient data transmitted over the wireless network.
   • CDelayed or lost transmission of critical patient monitoring data.
   • DPermanent failure of the medical devices' firmware.
   Reveal Solution Discussion Select an answer first