A network engineer is capturing wireless traffic to analyze the signal strength of a specific access point. Which information in the captured frame would provide the signal strength?

The radiotap header of the captured frame

An auditor is using Kismet with a single monitor-mode adapter to survey a large facility for all wireless devices. The auditor needs to ensure that both 2.4 GHz and 5 GHz bands are covered. What is the best approach to achieve comprehensive coverage?

Use two adapters, one for each band, and configure Kismet to use both.

Use a wideband antenna to capture both bands at once.

Set the adapter to hop across all channels in both bands sequentially.

Run two instances of Kismet on the same adapter.

A penetration tester has captured a WPA2 handshake and wants to attempt offline cracking. The tester has a wordlist and is using aircrack-ng. What additional information is required to successfully crack the passphrase?

The SSID of the target network.

The channel number of the network.

An auditor is assessing a WPA2 network and needs to capture a four-way handshake from a client that is already connected. The auditor's adapter supports monitor mode and packet injection. Which technique would force the client to reconnect and generate a fresh handshake?

Send a probe request to the client

Send a beacon frame with a different SSID

Send an association request to the client

Send a deauthentication frame to the client from the access point's MAC address

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 2

Sniffing Wireless GAWN Practice Questions (Page 3)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 11–15

11foundation · easy
Which of the following tools is part of the Aircrack-ng suite and is used to capture wireless packets?
Select an answer first
12application · medium
A network engineer is capturing wireless traffic to analyze the signal strength of a specific access point. Which information in the captured frame would provide the signal strength?
Select an answer first
13application · medium
An auditor is using Kismet with a single monitor-mode adapter to survey a large facility for all wireless devices. The auditor needs to ensure that both 2.4 GHz and 5 GHz bands are covered. What is the best approach to achieve comprehensive coverage?
Select an answer first
14application · medium
A penetration tester has captured a WPA2 handshake and wants to attempt offline cracking. The tester has a wordlist and is using aircrack-ng. What additional information is required to successfully crack the passphrase?
Select an answer first
15application · medium
An auditor is assessing a WPA2 network and needs to capture a four-way handshake from a client that is already connected. The auditor's adapter supports monitor mode and packet injection. Which technique would force the client to reconnect and generate a fresh handshake?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.