A security consultant is hired to assess the wireless security of a corporate office. The consultant wants to identify all access points and clients without alerting the network administrator. Which technique should the consultant use?

Use an active wireless scanner that sends probe requests to discover hidden SSIDs.

Perform a passive site survey using a wireless sniffer to capture beacon frames and probe requests.

Connect to the corporate network and use network scanning tools to enumerate wireless clients.

Review the company's wireless controller logs for a list of connected clients.

Which method is specifically used to detect rogue access points by monitoring the airwaves for wireless signals that are not part of the authorized network?

Wireless intrusion detection system (WIDS)

A manufacturing company wants to secure its wireless network for industrial IoT sensors. The sensors support WPA2-Enterprise but not WPA3. The company requires strong authentication and protection against rogue access points. Which combination of controls is most appropriate?

Use WPA2-PSK with a long passphrase and enable MAC filtering

Use WPA3-Personal with a strong passphrase

Disable wireless and use only wired connections

Deploy WPA2-Enterprise with 802.1X and a wireless intrusion prevention system (WIPS)

A hospital's WIDS alerts on a rogue access point that is broadcasting the same SSID as the guest network. The rogue AP is using a different channel and has a stronger signal. The guest network is isolated from the medical device network. What is the most appropriate response?

Locate and remove the rogue AP, then review guest network security controls

Ignore the alert because the guest network is isolated

Change the guest network SSID to a new name

Immediately disconnect the guest network to prevent data theft

GIAC Global Industrial Cyber Security Professional

Domain 2Objective 3

Wireless Technologies & Compromises GICSP Practice Questions (Page 1)

Part of the Threats, Vulnerabilities, and Compromises domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 6–11 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 1–5

1application · medium
A security consultant is hired to assess the wireless security of a corporate office. The consultant wants to identify all access points and clients without alerting the network administrator. Which technique should the consultant use?
Select an answer first
2foundation · easy
Which method is specifically used to detect rogue access points by monitoring the airwaves for wireless signals that are not part of the authorized network?
Select an answer first
3application · medium
A manufacturing company wants to secure its wireless network for industrial IoT sensors. The sensors support WPA2-Enterprise but not WPA3. The company requires strong authentication and protection against rogue access points. Which combination of controls is most appropriate?
Select an answer first
4foundation · easy
Which wireless attack involves sending forged management frames to force clients to disconnect from an access point, potentially allowing the attacker to capture the client's reconnection handshake?
Select an answer first
5expert · hard
A hospital's WIDS alerts on a rogue access point that is broadcasting the same SSID as the guest network. The rogue AP is using a different channel and has a stronger signal. The guest network is isolated from the medical device network. What is the most appropriate response?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.