DoS on Wireless Networks GAWN Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company's wireless network is hit by a deauthentication attack that disconnects all employees for 10 minutes. During this time, an attacker captures traffic from a few clients that were still connected. Which of the following is the most accurate assessment of the attack's impact on the CIA triad?

   • AIntegrity was compromised because the attacker modified the deauthentication frames.
   • BAll three pillars were equally compromised by the attack.
   • CAvailability was compromised, and confidentiality may have been compromised if the captured traffic was not encrypted.
   • DAvailability was compromised, but confidentiality and integrity were not affected.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security analyst is investigating a wireless DoS incident. The analyst captures traffic and sees a large number of beacon frames from various MAC addresses, all advertising the same SSID as the corporate network. The beacons are being sent at a very high rate. What is the most likely impact of this attack?

   • AClients will be forced to use a different encryption protocol.
   • BThe AP will automatically change its channel to avoid interference.
   • CClients will see multiple APs with the same SSID and may attempt to connect to a rogue AP.
   • DClients will be unable to authenticate because the AP is overwhelmed.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security analyst is investigating a wireless DoS incident. The analyst notices that the attack involves sending a large number of association requests to an access point, exhausting its resources. Which attack vector is being used?

   • ABeacon flooding
   • BAssociation flooding
   • CDeauthentication flooding
   • DRF jamming
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which detection technique involves monitoring the number of failed association requests or repeated authentication attempts to identify a potential DoS attack?

   • ATraffic analysis
   • BRogue AP detection
   • CPassword cracking
   • DSpectrum analysis
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A network administrator is using Wireshark to analyze a wireless capture. The administrator filters for management frames and sees a high number of deauthentication frames from a single MAC address to various clients. The frames are being sent at a rate of 100 per second. What is the most likely conclusion?

   • AA client is experiencing a driver issue and sending deauthentication frames.
   • BAn attacker is performing a deauthentication attack.
   • CThe AP is rebooting and sending deauthentication frames to all clients.
   • DA client is roaming between APs and generating deauthentication frames.
   Reveal Solution Discussion Select an answer first