A small business uses a single WPA2-PSK access point. The owner suspects a deauthentication attack because employees keep losing connectivity. The business cannot afford new hardware. Which countermeasure is most likely to reduce the effectiveness of the attack?

Reduce the transmit power of the access point to shrink the attack surface.

Disable SSID broadcast to hide the network from attackers.

Change the SSID to a less predictable name.

Enable WPA3-SAE on the access point if a firmware update is available.

A retail store's Wi-Fi network experiences periodic outages that correlate with the operation of a new microwave oven in the break room. The store's access points are dual-band 2.4/5 GHz. Which mitigation would be most effective while maintaining service for existing clients?

Enable band steering on the access points to encourage capable clients to use the 5 GHz band, and keep 2.4 GHz for legacy devices.

Increase the transmit power of the 2.4 GHz radios to overcome the interference.

Move the microwave oven away from the break room and install a faraday cage around it.

Disable the 2.4 GHz radios on all access points and force clients to use 5 GHz.

A network administrator wants to detect a deauthentication attack on a WPA2-Enterprise network. Which monitoring technique would be most effective?

Check the access point's syslog for client disconnection events.

Monitor the switch ports for high traffic volume.

Monitor the RADIUS server logs for failed authentication attempts.

Use a wireless intrusion detection system (WIDS) to monitor for unusual deauthentication frame rates.

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 3

DoS on Wireless Networks GAWN Practice Questions (Page 4)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 16–20

16foundation · easy
Which wireless DoS attack type involves flooding the airwaves with management frames to create a large number of fake access points?
Select an answer first
17application · medium
A network administrator notices that all wireless clients in a conference room suddenly lose connectivity at the same time. A spectrum analyzer shows a strong, constant signal on the same channel as the AP, but no valid 802.11 frames are detected. Which type of DoS attack is most likely occurring?
Select an answer first
18application · medium
A small business uses a single WPA2-PSK access point. The owner suspects a deauthentication attack because employees keep losing connectivity. The business cannot afford new hardware. Which countermeasure is most likely to reduce the effectiveness of the attack?
Select an answer first
19application · medium
A retail store's Wi-Fi network experiences periodic outages that correlate with the operation of a new microwave oven in the break room. The store's access points are dual-band 2.4/5 GHz. Which mitigation would be most effective while maintaining service for existing clients?
Select an answer first
20application · medium
A network administrator wants to detect a deauthentication attack on a WPA2-Enterprise network. Which monitoring technique would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

DoS on Wireless Networks GAWN Practice Questions (Page 4)

Questions 16–20

Which wireless DoS attack type involves flooding the airwaves with management frames to create a large number of fake access points?

A network administrator notices that all wireless clients in a conference room suddenly lose connectivity at the same time. A spectrum analyzer shows a strong, constant signal on the same channel as the AP, but no valid 802.11 frames are detected. Which type of DoS attack is most likely occurring?

A small business uses a single WPA2-PSK access point. The owner suspects a deauthentication attack because employees keep losing connectivity. The business cannot afford new hardware. Which countermeasure is most likely to reduce the effectiveness of the attack?

A retail store's Wi-Fi network experiences periodic outages that correlate with the operation of a new microwave oven in the break room. The store's access points are dual-band 2.4/5 GHz. Which mitigation would be most effective while maintaining service for existing clients?

A network administrator wants to detect a deauthentication attack on a WPA2-Enterprise network. Which monitoring technique would be most effective?

Keep studying — Wireless Fundamentals and Threats