Hotspots GAWN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When auditing a hotspot, what ethical consideration should you keep in mind regarding user data?

   • AYou can share user data with other researchers
   • BYou can ignore privacy concerns if the hotspot is public
   • CYou should minimize the collection and handling of personal data
   • DYou should collect as much data as possible for analysis
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An auditor is testing a public library's captive portal. The auditor connects to the open SSID, receives an IP address, and opens a browser. The portal page loads over HTTP and asks for an email address. After submitting, the auditor notices that the portal redirects to the requested site, but the browser shows a certificate warning. What is the most significant security issue with this captive portal implementation?

   • AThe email address submission is the primary risk, but the certificate warning is unrelated to the captive portal and should be ignored.
   • BThe certificate warning indicates the library's portal is using a self-signed certificate, which is always a sign of malicious activity.
   • CThe portal should have used WPA2-Enterprise instead of a captive portal, because open networks cannot enforce any authentication.
   • DThe portal uses HTTP, which allows an attacker on the same network to capture the submitted email address and any subsequent HTTP traffic.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A small business owner wants to offer free Wi-Fi to customers. The owner is concerned about liability and wants to prevent customers from accessing illegal content. The owner also wants to ensure that customer devices are protected from each other. Which combination of features should the owner implement on the hotspot?

   • AOpen network with a captive portal and client isolation
   • BWPA2-Enterprise with individual credentials for each customer
   • CWPA2-Personal with a shared passphrase and no captive portal
   • DWEP encryption with MAC filtering
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst is investigating a report that users on a corporate guest network are seeing intermittent disconnections and then being redirected to a fake login page. The analyst discovers that the guest network uses WPA2-Personal with a shared password. Which attack technique is most likely being used, and what mitigation would be most effective?

   • ASession hijacking; enable HTTPS-only mode on the guest network's DNS server.
   • BRogue AP with MAC spoofing; implement MAC filtering on the guest network.
   • CEvil twin attack; implement WPA2-Enterprise with unique credentials for each guest.
   • DDeauthentication attack only; increase the DTIM interval to reduce the impact of disconnections.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security auditor is reviewing a hotel's captive portal implementation. The portal is served over HTTPS and collects the guest's room number and email address. The auditor notices that the portal's certificate is issued to the hotel's domain, but the portal redirects to a third-party analytics domain after submission. Which security issue is most significant?

   • AThe portal should use WPA2-Enterprise instead of a captive portal to ensure guest credentials are protected.
   • BThe portal's certificate is invalid because it is issued to the hotel's domain, not the analytics domain.
   • CThe redirect to a third-party domain could leak the guest's information to an external party, violating privacy expectations.
   • DThe portal should not use HTTPS because it slows down the captive portal experience.
   Reveal Solution Discussion Select an answer first