A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP. The tester wants to demonstrate how an attacker could compromise a client's device by delivering a malicious payload. Which approach would be most effective in this scenario?

Set up a rogue AP with a fake RADIUS server to capture the user's credentials and then use those credentials to access the corporate network.

Send deauthentication frames to the user's device and then capture the WPA2 handshake to crack the password.

Create an evil twin AP with the same SSID and a captive portal that prompts the user to install a fake security update.

Use a man-in-the-middle attack to inject a malicious JavaScript into the user's browser session after they connect to the legitimate network.

A security analyst is investigating a breach where a user's laptop was compromised after connecting to a public Wi-Fi network. The analyst finds that the user's browser was redirected to a malicious website that exploited a browser vulnerability. Which attack chain most likely occurred?

The attacker used a rogue AP with a different SSID and waited for the user to connect.

The attacker used a deauthentication attack to disconnect the user and then captured the WPA2 handshake.

The attacker set up an evil twin AP and used DNS spoofing to redirect the user to a malicious website.

The attacker used a packet sniffer to capture the user's traffic and extract the browser history.

What is a primary goal of an attacker launching a wireless client attack?

To update the firmware of the client device

To increase the signal strength of the wireless network

To change the wireless channel used by the access point

To steal credentials or sensitive data from the client device

GIAC Assessing and Auditing Wireless Networks

Domain 3Objective 1

Wireless Client Attacks GAWN Practice Questions (Page 6)

Part of the Wireless Client and Network Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

9concepts

Questions 26–30

26application · medium
A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP. The tester wants to demonstrate how an attacker could compromise a client's device by delivering a malicious payload. Which approach would be most effective in this scenario?
Select an answer first
27foundation · easy
Which technique is used to prevent wireless clients from communicating directly with each other on the same network?
Select an answer first
28application · medium
A security analyst is investigating a breach where a user's laptop was compromised after connecting to a public Wi-Fi network. The analyst finds that the user's browser was redirected to a malicious website that exploited a browser vulnerability. Which attack chain most likely occurred?
Select an answer first
29foundation · easy
What is a primary goal of an attacker launching a wireless client attack?
Select an answer first
30foundation · easy
Which technique is commonly used to perform a man-in-the-middle attack on a wireless client?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Wireless Client Attacks GAWN Practice Questions (Page 6)

Questions 26–30

A penetration tester is assessing a corporate wireless network that uses WPA2-Enterprise with PEAP. The tester wants to demonstrate how an attacker could compromise a client's device by delivering a malicious payload. Which approach would be most effective in this scenario?

Which technique is used to prevent wireless clients from communicating directly with each other on the same network?

A security analyst is investigating a breach where a user's laptop was compromised after connecting to a public Wi-Fi network. The analyst finds that the user's browser was redirected to a malicious website that exploited a browser vulnerability. Which attack chain most likely occurred?

What is a primary goal of an attacker launching a wireless client attack?

Which technique is commonly used to perform a man-in-the-middle attack on a wireless client?

Keep studying — Wireless Client and Network Attacks