Wireless Technologies & Compromises GICSP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security consultant is performing a wireless security assessment for a client. The goal is to identify all Wi-Fi networks in the area and capture handshakes to test password strength. Which set of tools and techniques should the consultant use?

   • AUse a laptop with a wireless card in monitor mode and a tool like Kismet to discover networks and capture packets
   • BUse a wireless repeater to extend the network and then capture traffic from the repeater
   • CUse a Bluetooth scanner to find Wi-Fi networks and then use a GPS to map them
   • DUse a spectrum analyzer to identify Wi-Fi channels and then use a wired sniffer to capture handshakes
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   During a routine wireless survey, a security analyst discovers an access point that is not on the approved inventory. The AP is connected to the corporate network via an Ethernet port in a conference room. Which type of attack is this, and what is the first step in remediation?

   • AEvil twin; immediately block the AP's MAC address on the switch
   • BWardriving; ignore it because it is not broadcasting a corporate SSID
   • CDeauthentication attack; change the SSID of the legitimate network
   • DRogue access point; disconnect the Ethernet cable and physically remove the device
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team is evaluating the risk of WPA2-PSK on a network used by OT devices. The devices are not capable of WPA3. The team is considering implementing WPA2-Enterprise, but the OT devices do not support 802.1X. Which alternative control is most effective in reducing the risk of offline dictionary attacks?

   • AUse a very long random passphrase and change it frequently
   • BUse a passphrase that is not in any dictionary and is at least 20 characters long
   • CImplement a wireless intrusion prevention system (WIPS) to detect handshake captures
   • DUse WPA2-PSK with a passphrase derived from a hardware security module
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security team is investigating a wireless incident at a distribution center. The WIDS shows an unknown access point with the same SSID as the corporate network but a different BSSID, and it is broadcasting on a channel not used by the corporate APs. Several employees reported being prompted to re-enter their Wi-Fi password. Which attack is most likely, and what is the best immediate response?

   • ARogue access point; change the corporate SSID to a new name
   • BWardriving incident; ignore it because the signal is weak
   • CDeauthentication attack; update the WIDS signatures
   • DEvil twin attack; use the WIDS to locate the rogue AP and physically remove it
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is reviewing wireless intrusion detection system (WIDS) alerts and notices a new access point with a BSSID that does not match any known device. The AP is broadcasting the same SSID as the corporate network. Which action should the analyst take first?

   • ANotify all users to change their Wi-Fi passwords immediately.
   • BDisable the corporate SSID to prevent clients from connecting to the rogue AP.
   • CInvestigate the AP's location and determine if it is authorized before taking action.
   • DImmediately block the MAC address of the rogue AP in the WIDS.
   Reveal Solution Discussion Select an answer first