Wireless Client Attacks GAWN Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A penetration tester is assessing the security of a corporate wireless network. The tester wants to demonstrate how an attacker could compromise a client device by delivering a malicious payload over the wireless network. The tester has identified that the client devices are running an outdated browser with known vulnerabilities. Which attack vector would be most effective?

   • AUse a tool to perform a man-in-the-middle attack and inject malicious code into the client's HTTPS traffic.
   • BSet up a rogue AP and redirect the client's web traffic to a malicious website that exploits the browser vulnerability.
   • CSend deauthentication frames to the client to force it to reconnect to the legitimate AP.
   • DCapture the client's probe requests to identify its preferred networks and then create a rogue AP with a similar SSID.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A network administrator is responsible for a wireless network that supports legacy devices that do not support 802.11w. The administrator wants to mitigate deauthentication attacks while maintaining compatibility with these devices. Which approach would be most effective?

   • ADisable 802.11w entirely to ensure all devices can connect.
   • BUse WPA3 with SAE, which inherently protects management frames.
   • CImplement MAC address filtering to only allow known devices.
   • DEnable 802.11w in 'capable' mode, which protects management frames on devices that support it while allowing legacy devices to connect.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network administrator is concerned about deauthentication attacks on the corporate Wi-Fi. The administrator wants to implement a solution that prevents attackers from spoofing deauthentication frames. Which technology should be enabled?

   • ADisable the SSID broadcast to make the network less visible.
   • BWPA3 with SAE (Simultaneous Authentication of Equals) for authentication.
   • CMAC address filtering on the access points.
   • D802.11w (Management Frame Protection) on both the access points and client devices.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which category of wireless client attack aims to install malware or take control of the client device?

   • ADevice compromise
   • BChannel hopping
   • CPacket sniffing
   • DSignal jamming
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to protect its employees from evil twin attacks when they use the corporate Wi-Fi on their laptops. The company uses WPA2-Enterprise with certificates for authentication. Which additional measure would best mitigate the risk of connecting to a rogue AP?

   • AUse a longer WPA2 passphrase for the network.
   • BImplement MAC address filtering on the access points.
   • CConfigure the clients to validate the server certificate and enable server name verification.
   • DDisable SSID broadcast to make the network less visible.
   Reveal Solution Discussion Select an answer first