A hospital is deploying a wireless network for patient monitoring devices that require low latency and high reliability. The network must also support guest Wi-Fi for visitors. The hospital has limited budget and cannot install additional access points. The engineer must choose between using 2.4 GHz and 5 GHz for the monitoring devices. Which approach best balances the requirements?

Use 2.4 GHz for monitoring devices and 5 GHz for guest Wi-Fi

Disable guest Wi-Fi to free up spectrum for monitoring

Use 5 GHz for monitoring devices and 2.4 GHz for guest Wi-Fi

Use the same frequency band for both services to simplify management

A security auditor is assessing a wireless network that uses WPA2-PSK. The auditor captures the four-way handshake and successfully cracks the pre-shared key using a dictionary attack. Which wireless threat is most directly demonstrated by this action?

Rogue access point impersonation

Unauthorized access through key compromise

Eavesdropping on network traffic

Denial of service via deauthentication

A hospital's wireless network uses WPA2-Enterprise with 802.1X authentication. During a routine audit, the security team discovers an unknown access point broadcasting the hospital's SSID with an open authentication method. The rogue AP is located in a conference room and is connected to the hospital's wired network via an unused wall jack. Which threat is the rogue AP most directly enabling?

Eavesdropping on wireless client traffic by presenting a fake authentication portal

MAC address spoofing to bypass the hospital's MAC filtering

Jamming the 2.4 GHz band to disrupt all wireless communications

Denial of service by deauthenticating all clients from the legitimate AP

A small business uses a wireless network with WPA2-PSK for employee devices. The owner suspects a former employee is still able to access the network. The audit reveals that the former employee's laptop has a saved Wi-Fi profile for the network and the password has not been changed since the employee left. Which wireless threat is most directly exploited in this situation?

Rogue access point impersonation

Denial of service via deauthentication attacks

Eavesdropping on network traffic

Unauthorized access through shared key compromise

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 1

Wireless Basics GAWN Practice Questions (Page 3)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

2concepts

Questions 11–15

11expert · hard
A hospital is deploying a wireless network for patient monitoring devices that require low latency and high reliability. The network must also support guest Wi-Fi for visitors. The hospital has limited budget and cannot install additional access points. The engineer must choose between using 2.4 GHz and 5 GHz for the monitoring devices. Which approach best balances the requirements?
Select an answer first
12application · medium
A security auditor is assessing a wireless network that uses WPA2-PSK. The auditor captures the four-way handshake and successfully cracks the pre-shared key using a dictionary attack. Which wireless threat is most directly demonstrated by this action?
Select an answer first
13application · medium
A hospital's wireless network uses WPA2-Enterprise with 802.1X authentication. During a routine audit, the security team discovers an unknown access point broadcasting the hospital's SSID with an open authentication method. The rogue AP is located in a conference room and is connected to the hospital's wired network via an unused wall jack. Which threat is the rogue AP most directly enabling?
Select an answer first
14foundation · easy
Which wireless threat involves an unauthorized access point installed on a network that appears legitimate but is controlled by an attacker, potentially allowing interception of traffic or unauthorized access?
Select an answer first
15application · medium
A small business uses a wireless network with WPA2-PSK for employee devices. The owner suspects a former employee is still able to access the network. The audit reveals that the former employee's laptop has a saved Wi-Fi profile for the network and the password has not been changed since the employee left. Which wireless threat is most directly exploited in this situation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Wireless Basics GAWN Practice Questions (Page 3)

Questions 11–15

A security auditor is assessing a wireless network that uses WPA2-PSK. The auditor captures the four-way handshake and successfully cracks the pre-shared key using a dictionary attack. Which wireless threat is most directly demonstrated by this action?

Which wireless threat involves an unauthorized access point installed on a network that appears legitimate but is controlled by an attacker, potentially allowing interception of traffic or unauthorized access?

Keep studying — Wireless Fundamentals and Threats