A security auditor is performing a wireless assessment and wants to detect rogue access points that are connected to the wired network. Which technique is most effective for this purpose?

Use a wireless scanner to identify all access points broadcasting in the area.

Use a wired network scanner to identify devices that are acting as access points.

Use a wireless intrusion prevention system (WIPS) that can detect and locate rogue APs.

Use a spectrum analyzer to identify the RF signature of rogue APs.

A network administrator is configuring a wireless network for a small business. The business wants to prevent unauthorized users from connecting to the network. Which of the following is the most secure authentication method?

WPA2-PSK with a strong passphrase.

WPA2-Enterprise with 802.1X and a RADIUS server.

Open authentication with MAC address filtering.

A company's wireless network was recently attacked by an attacker who set up an evil twin access point and captured employee credentials. The company wants to prevent this type of attack in the future. Which of the following is the most effective control?

Disable SSID broadcast to make the network less visible.

Enable MAC address filtering on the access point.

Use WPA2-Enterprise with a valid certificate for the RADIUS server.

Use WPA2-PSK with a strong passphrase.

A financial firm's wireless network uses WPA2-Enterprise with certificate-based authentication. The security team discovers that an attacker has obtained a valid certificate for the corporate SSID and is operating a rogue AP with the same SSID. Clients are connecting to the rogue AP, and the attacker is capturing their credentials. Which mitigation would be most effective in preventing this attack?

Configuring clients to validate the server certificate and use a trusted CA

Implementing rogue AP detection and wireless intrusion prevention

Using a stronger encryption protocol like WPA3

Changing the SSID to a non-public name

A hospital's wireless network is used for critical patient monitoring. The network administrator is concerned about an attacker using a deauthentication attack to disrupt the monitoring devices. Which mitigation is most effective against this type of denial-of-service attack?

Use a stronger encryption algorithm such as AES-CCMP.

Hide the SSID so attackers cannot find the network.

Enable management frame protection (802.11w) on the access points and clients.

Enable WPA2-Enterprise with 802.1X authentication.

GIAC Assessing and Auditing Wireless Networks

Domain 1Objective 1

Wireless Basics GAWN Practice Questions (Page 4)

Part of the Wireless Fundamentals and Threats domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

2concepts

Questions 16–20

16application · medium
A security auditor is performing a wireless assessment and wants to detect rogue access points that are connected to the wired network. Which technique is most effective for this purpose?
Select an answer first
17application · medium
A network administrator is configuring a wireless network for a small business. The business wants to prevent unauthorized users from connecting to the network. Which of the following is the most secure authentication method?
Select an answer first
18expert · medium
A company's wireless network was recently attacked by an attacker who set up an evil twin access point and captured employee credentials. The company wants to prevent this type of attack in the future. Which of the following is the most effective control?
Select an answer first
19expert · hard
A financial firm's wireless network uses WPA2-Enterprise with certificate-based authentication. The security team discovers that an attacker has obtained a valid certificate for the corporate SSID and is operating a rogue AP with the same SSID. Clients are connecting to the rogue AP, and the attacker is capturing their credentials. Which mitigation would be most effective in preventing this attack?
Select an answer first
20application · medium
A hospital's wireless network is used for critical patient monitoring. The network administrator is concerned about an attacker using a deauthentication attack to disrupt the monitoring devices. Which mitigation is most effective against this type of denial-of-service attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.