A security consultant is assessing a hotel's Wi-Fi network. The hotel uses a captive portal for guest access. During the assessment, the consultant discovers that the captive portal's login page is served over HTTP and that the session cookie is not marked as Secure. The consultant also finds that the hotel's access points do not have client isolation enabled. Which combination of attacks is the consultant most likely to successfully demonstrate?

Session hijacking and ARP spoofing

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 2

Hotspots GAWN Practice Questions (Page 7)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

Questions 31–31

31expert · hard
A security consultant is assessing a hotel's Wi-Fi network. The hotel uses a captive portal for guest access. During the assessment, the consultant discovers that the captive portal's login page is served over HTTP and that the session cookie is not marked as Secure. The consultant also finds that the hotel's access points do not have client isolation enabled. Which combination of attacks is the consultant most likely to successfully demonstrate?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Hotspots GAWN Practice Questions (Page 7)

Questions 31–31

Keep studying — Wireless Client and Network Attacks