Which feature is essential for a wireless NIC to be used for packet injection in wireless security testing?

Support for monitor mode and packet injection

Compatibility with Windows operating systems

Dual-band 2.4 GHz and 5 GHz support

A network analyst is examining a Wireshark capture from a monitor-mode adapter. The analyst wants to determine the signal strength of a specific access point. Where should the analyst look in Wireshark?

In the 802.11 MAC header of the frame.

In the radiotap header of the captured frame.

In the LLC/SNAP header of the frame.

In the payload of the data frame.

A security analyst is capturing traffic on a WPA2-PSK network and has successfully captured a four-way handshake. The analyst attempts to crack the passphrase using a dictionary attack but fails. Which is the most likely reason for the failure?

The passphrase is not in the dictionary file being used

The adapter does not support packet injection

The network uses WPA3 instead of WPA2

The handshake was captured on the wrong channel

What is the primary purpose of passive wireless sniffing in a security assessment?

To authenticate to the target network and access its resources

To alter the configuration of access points to improve security

To inject crafted frames into the network to test filtering rules

To capture and analyze wireless frames without transmitting any data

What is the primary effect of placing a wireless adapter into monitor mode?

It disables the adapter's ability to transmit any frames

It automatically connects to the strongest access point

It increases the transmit power of the adapter

It allows the adapter to capture all wireless frames on a channel without associating

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 2

Sniffing Wireless GAWN Practice Questions (Page 6)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 26–30

26foundation · easy
Which feature is essential for a wireless NIC to be used for packet injection in wireless security testing?
Select an answer first
27application · medium
A network analyst is examining a Wireshark capture from a monitor-mode adapter. The analyst wants to determine the signal strength of a specific access point. Where should the analyst look in Wireshark?
Select an answer first
28expert · hard
A security analyst is capturing traffic on a WPA2-PSK network and has successfully captured a four-way handshake. The analyst attempts to crack the passphrase using a dictionary attack but fails. Which is the most likely reason for the failure?
Select an answer first
29foundation · easy
What is the primary purpose of passive wireless sniffing in a security assessment?
Select an answer first
30foundation · easy
What is the primary effect of placing a wireless adapter into monitor mode?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.