A company is deploying a secure remote access solution for employees who travel frequently. The employees use a variety of devices, including company-issued laptops and personal smartphones. The company wants to ensure that all traffic from these devices is protected when they connect to public hotspots. What is the most effective approach?

Provide employees with a list of recommended public hotspots that are known to be secure

Enable two-factor authentication for all remote access

Deploy a mobile device management (MDM) solution that enforces a VPN profile on all devices

Require employees to use only company-issued laptops for remote access

A security researcher is conducting a passive assessment of a public hotspot in a shopping mall. The researcher is capturing beacon frames and client probe requests to identify potential rogue access points. During the assessment, the researcher captures a probe request from a user's smartphone that contains the SSID of a private corporate network. What is the most ethical and legal course of action for the researcher?

Contact the user's employer to inform them of the potential security risk

Report the finding to the mall's management and recommend they warn users about probe request leakage

Use the captured SSID to set up an evil twin and demonstrate the risk to the user

Ignore the probe request because it is not relevant to the assessment

A security consultant is reviewing the risks of a public Wi-Fi hotspot at a convention center. The hotspot uses WPA2-Personal with a password displayed on screens throughout the venue. Which risk is most directly increased by this configuration, and what is the most effective mitigation?

Rogue AP; recommend the venue use WEP to make the network more secure.

Deauthentication; recommend the venue increase the beacon interval to reduce disconnections.

Session hijacking; recommend the venue disable DHCP to prevent IP conflicts.

Eavesdropping; recommend users connect through a VPN to encrypt their traffic.

Which client-side security tool can help verify the identity of a website and protect against man-in-the-middle attacks?

HTTPS with certificate validation

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 2

Hotspots GAWN Practice Questions (Page 4)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

Questions 16–20

16application · medium
A company is deploying a secure remote access solution for employees who travel frequently. The employees use a variety of devices, including company-issued laptops and personal smartphones. The company wants to ensure that all traffic from these devices is protected when they connect to public hotspots. What is the most effective approach?
Select an answer first
17expert · hard
A security researcher is conducting a passive assessment of a public hotspot in a shopping mall. The researcher is capturing beacon frames and client probe requests to identify potential rogue access points. During the assessment, the researcher captures a probe request from a user's smartphone that contains the SSID of a private corporate network. What is the most ethical and legal course of action for the researcher?
Select an answer first
18foundation · easy
Which hotspot authentication method uses a web-based login page that users must interact with before gaining network access?
Select an answer first
19application · medium
A security consultant is reviewing the risks of a public Wi-Fi hotspot at a convention center. The hotspot uses WPA2-Personal with a password displayed on screens throughout the venue. Which risk is most directly increased by this configuration, and what is the most effective mitigation?
Select an answer first
20foundation · easy
Which client-side security tool can help verify the identity of a website and protect against man-in-the-middle attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Hotspots GAWN Practice Questions (Page 4)

Questions 16–20

Which hotspot authentication method uses a web-based login page that users must interact with before gaining network access?

A security consultant is reviewing the risks of a public Wi-Fi hotspot at a convention center. The hotspot uses WPA2-Personal with a password displayed on screens throughout the venue. Which risk is most directly increased by this configuration, and what is the most effective mitigation?

Which client-side security tool can help verify the identity of a website and protect against man-in-the-middle attacks?

Keep studying — Wireless Client and Network Attacks