Wireless Client Attacks GAWN Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security architect is designing a secure wireless network for a financial institution. The institution requires that client traffic be protected from man-in-the-middle attacks, but also needs to allow guests to access the internet. The architect is considering using a client isolation feature on the guest network. Which additional measure is essential to protect guests from man-in-the-middle attacks?

   • AEnabling WPA2-Enterprise with PEAP for the guest network.
   • BImplementing a VPN for all guest traffic.
   • CDisabling SSID broadcast on the guest network.
   • DUsing a stronger encryption protocol like WPA3 for the guest network.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary purpose of a rogue access point in a wireless client attack?

   • ATo monitor network performance for troubleshooting
   • BTo improve the security of the wireless network
   • CTo extend the legitimate network's coverage area
   • DTo lure clients into connecting so the attacker can capture their traffic
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   How can an attacker deliver a malicious update to a wireless client?

   • ABy increasing the signal strength of the access point
   • BBy disabling the client's firewall
   • CBy intercepting and modifying the update traffic during a MITM attack
   • DBy changing the client's SSID
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security auditor is testing the wireless network of a hotel that offers a single open SSID 'HotelGuest'. The auditor wants to demonstrate how an attacker could capture a guest's credentials when they connect to the legitimate network. The auditor has a laptop with two wireless adapters and can run Kali Linux tools. Which approach would most effectively demonstrate the attack while also showing the need for client-side protections?

   • ASet up an evil twin AP with the same SSID, send deauthentication frames to force clients to reconnect, and capture the handshake or portal submissions.
   • BUse a single adapter to passively capture all traffic on the channel and extract credentials from the open network without any active interference.
   • CDeploy a rogue AP with a different SSID and wait for clients to manually connect to it, then capture their traffic.
   • DSend disassociation frames to all clients and then use a packet sniffer to capture the reconnection handshake on the legitimate AP.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   In an evil twin attack, what is the attacker's primary goal?

   • ATo increase the signal strength of the legitimate network
   • BTo change the encryption method of the legitimate network
   • CTo block all wireless signals in the area
   • DTo trick clients into connecting to a fake AP that mimics a trusted network
   Reveal Solution Discussion Select an answer first