Hotspots GAWN Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A municipality is deploying a public Wi-Fi network in a city park. The network uses a captive portal that requires users to log in with their email address. The municipality wants to use the email addresses for marketing purposes. The city's legal counsel has advised that this practice may violate privacy regulations. What is the most appropriate course of action?

   • AModify the captive portal to include a clear opt-in checkbox for marketing communications
   • BContinue collecting email addresses but anonymize them before using for marketing
   • CUse a third-party service to manage the email list and avoid direct collection
   • DDiscontinue the collection of email addresses entirely
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security auditor is assessing a coffee shop's guest Wi-Fi hotspot. The auditor notices that the access point is broadcasting a legitimate SSID, but the BSSID does not match the MAC address printed on the router's label. The auditor also observes that the signal strength is unusually strong from a corner of the shop where no access point is visible. Which attack technique is the auditor most likely observing?

   • AEvil twin attack
   • BSession hijacking
   • CDeauthentication attack
   • DKarma attack
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which attack technique involves an attacker creating a fake access point with the same SSID as a legitimate hotspot?

   • ASession hijacking
   • BDeauthentication attack
   • CRogue DHCP server
   • DEvil twin
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a security implication of using a captive portal in a hotspot?

   • AIt prevents all man-in-the-middle attacks
   • BIt ensures the hotspot is legitimate
   • CIt can be spoofed by an attacker to capture credentials
   • DIt encrypts user traffic after authentication
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security architect is designing a secure remote-access solution for employees who frequently work from public hotspots. The company has a limited budget and cannot deploy a full VPN infrastructure. Which combination of controls provides the most comprehensive protection for the available resources?

   • ARequire employees to use a personal firewall and disable file sharing on their devices.
   • BMandate HTTPS-only browsing and enable DNS-over-HTTPS in the browser.
   • CDeploy a cloud-based VPN service that encrypts all traffic from the device to the VPN provider.
   • DUse WPA2-Enterprise on the hotspot to encrypt traffic, assuming the hotspot supports it.
   Reveal Solution Discussion Select an answer first