A network administrator finds an access point in the lobby that is not in the inventory. It is connected to the corporate network and is broadcasting a guest SSID. Which statement best describes this device?

It is an evil twin because it broadcasts a guest SSID

It is an ad-hoc network because it is in the lobby

It is a legitimate AP because it provides guest access

It is a rogue access point because it is unauthorized and connected to the corporate network

A company wants to detect rogue access points that are not connected to the wired network. Which detection method is most effective for this scenario?

Deploy wireless sensors that monitor the airspace for unauthorized SSIDs and BSSIDs.

Use a spectrum analyzer to detect RF interference.

Conduct a physical inspection of all network closets.

Monitor switch logs for unknown MAC addresses.

A retail chain wants to prevent employees from plugging personal wireless routers into the store's network to extend coverage. They already have a WIDS. What additional control would most directly address this specific risk?

Change the corporate SSID to a hidden SSID so employees cannot see it.

Disable unused switch ports and enable port security with MAC address locking.

Require all employees to sign an acceptable use policy that prohibits personal routers.

Deploy a second WIDS to monitor the same airspace for redundancy.

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 4

Rogue Networks GAWN Practice Questions (Page 3)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 11–15

11application · medium
A network administrator finds an access point in the lobby that is not in the inventory. It is connected to the corporate network and is broadcasting a guest SSID. Which statement best describes this device?
Select an answer first
12foundation · easy
Which tool is specifically designed to monitor wireless traffic and detect rogue access points?
Select an answer first
13application · medium
A security analyst notices a client device that is sending probe requests for a corporate SSID, but the client is also communicating directly with another client device without going through an access point. What type of rogue network is this?
Select an answer first
14application · medium
A company wants to detect rogue access points that are not connected to the wired network. Which detection method is most effective for this scenario?
Select an answer first
15application · medium
A retail chain wants to prevent employees from plugging personal wireless routers into the store's network to extend coverage. They already have a WIDS. What additional control would most directly address this specific risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Rogue Networks GAWN Practice Questions (Page 3)

Questions 11–15

A network administrator finds an access point in the lobby that is not in the inventory. It is connected to the corporate network and is broadcasting a guest SSID. Which statement best describes this device?

Which tool is specifically designed to monitor wireless traffic and detect rogue access points?

A security analyst notices a client device that is sending probe requests for a corporate SSID, but the client is also communicating directly with another client device without going through an access point. What type of rogue network is this?

A company wants to detect rogue access points that are not connected to the wired network. Which detection method is most effective for this scenario?

A retail chain wants to prevent employees from plugging personal wireless routers into the store's network to extend coverage. They already have a WIDS. What additional control would most directly address this specific risk?

Keep studying — Wireless Fundamentals and Threats