A company discovers that an employee set up a personal wireless router in their office to get better signal. The router is not connected to the corporate network but is broadcasting the same SSID as the corporate network. What is the primary threat?

The personal router will automatically join the corporate domain and receive policy updates.

The personal router will cause a denial of service by jamming the corporate network.

The personal router will corrupt the corporate DNS records.

Clients may connect to the personal router, and the employee could intercept their traffic.

Which of the following methods is commonly used to detect rogue access points in a wireless network?

Pinging all IP addresses on the network to identify active hosts

Passive wireless scanning to capture and analyze beacon frames from nearby access points

Reviewing firewall logs for unauthorized connections

Checking the physical location of all network devices

A company wants to ensure that only authorized access points are allowed on the network. They have a WIDS that can detect rogue APs. What additional control should they implement to prevent rogue APs from being installed?

Increase the number of WIDS sensors to improve detection coverage.

Use 802.1X authentication on all wired switch ports.

Change the corporate SSID to a less common name.

Conduct monthly security awareness training for employees.

An evil twin AP is set up near a coffee shop that offers free Wi-Fi. A customer connects to the evil twin and enters their email credentials on a login page. What is the primary threat this customer faces?

Credential theft via a phishing page

Malware infection through the evil twin's firmware

Physical theft of the customer's device

Denial of service to the legitimate network

A university wants to prevent students from creating ad-hoc wireless networks in dormitories. They have a WIDS that can detect ad-hoc networks. What policy and technical control combination would be most effective?

Prohibit ad-hoc networks in the acceptable use policy and configure the WIDS to alert on any ad-hoc network.

Require students to register their personal devices with IT.

Use a stronger encryption protocol on the campus wireless network.

Disable the wireless network in dormitories entirely.

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 4

Rogue Networks GAWN Practice Questions (Page 5)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 21–25

21application · medium
A company discovers that an employee set up a personal wireless router in their office to get better signal. The router is not connected to the corporate network but is broadcasting the same SSID as the corporate network. What is the primary threat?
Select an answer first
22foundation · easy
Which of the following methods is commonly used to detect rogue access points in a wireless network?
Select an answer first
23application · medium
A company wants to ensure that only authorized access points are allowed on the network. They have a WIDS that can detect rogue APs. What additional control should they implement to prevent rogue APs from being installed?
Select an answer first
24application · medium
An evil twin AP is set up near a coffee shop that offers free Wi-Fi. A customer connects to the evil twin and enters their email credentials on a login page. What is the primary threat this customer faces?
Select an answer first
25application · medium
A university wants to prevent students from creating ad-hoc wireless networks in dormitories. They have a WIDS that can detect ad-hoc networks. What policy and technical control combination would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.