A security team is planning a wireless site survey to identify potential rogue APs. The survey must be conducted without disrupting operations, and the team wants to minimize the chance of being detected by an attacker who might be monitoring the airwaves. Which approach best meets these requirements?

Use an active survey that sends probe requests to discover hidden SSIDs.

Conduct the survey during off-hours to minimize disruption, using active scanning.

Use a passive survey with a spectrum analyzer and a wireless sniffer to collect data without transmitting.

Use the corporate wireless controller's built-in site survey tool.

A security engineer is evaluating the wireless security of a facility that uses WPA2-Enterprise with PEAP-MSCHAPv2. An attacker has been capturing authentication traffic and successfully cracking user passwords. The engineer wants to implement a more secure authentication method without replacing the existing RADIUS infrastructure. Which option is the most effective?

Use EAP-PEAP with MSCHAPv2 and enforce strong password policies.

Deploy a WIPS to detect and block the attacker's device.

Implement EAP-TTLS with PAP and a shared secret.

Switch to EAP-TLS with client certificates.

A security engineer is tasked with securing a wireless network that uses WPA2-PSK. The engineer is concerned about the risk of an attacker capturing the four-way handshake and cracking the PSK offline. The engineer has a limited budget and cannot replace the access points. Which control would provide the most effective mitigation?

Disable SSID broadcasting to make the network less visible to attackers.

Enable MAC address filtering to only allow known devices.

Implement a WIPS to detect and block deauthentication attacks that are often used to capture handshakes.

Use a very long and random pre-shared key and change it regularly.

A security analyst is performing a wireless survey and discovers a network that is not broadcasting its SSID. The analyst suspects it is a hidden network used by a nearby industrial facility. Which technique is most effective for discovering this hidden network?

Use a wired sniffer on the facility's network

Use a Bluetooth scanner to find the network

Use a spectrum analyzer to detect the RF signal

Wait for a client to associate and capture the probe request/response frames

GIAC Global Industrial Cyber Security Professional

Domain 2Objective 3

Wireless Technologies & Compromises GICSP Practice Questions (Page 3)

Part of the Threats, Vulnerabilities, and Compromises domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 6–11 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 11–15

11foundation · easy
Which wireless encryption protocol uses a 24-bit initialization vector (IV) that is transmitted in plaintext, leading to IV collisions that allow an attacker to recover the encryption key after capturing enough packets?
Select an answer first
12expert · hard
A security team is planning a wireless site survey to identify potential rogue APs. The survey must be conducted without disrupting operations, and the team wants to minimize the chance of being detected by an attacker who might be monitoring the airwaves. Which approach best meets these requirements?
Select an answer first
13expert · hard
A security engineer is evaluating the wireless security of a facility that uses WPA2-Enterprise with PEAP-MSCHAPv2. An attacker has been capturing authentication traffic and successfully cracking user passwords. The engineer wants to implement a more secure authentication method without replacing the existing RADIUS infrastructure. Which option is the most effective?
Select an answer first
14expert · hard
A security engineer is tasked with securing a wireless network that uses WPA2-PSK. The engineer is concerned about the risk of an attacker capturing the four-way handshake and cracking the PSK offline. The engineer has a limited budget and cannot replace the access points. Which control would provide the most effective mitigation?
Select an answer first
15expert · hard
A security analyst is performing a wireless survey and discovers a network that is not broadcasting its SSID. The analyst suspects it is a hidden network used by a nearby industrial facility. Which technique is most effective for discovering this hidden network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.

Wireless Technologies & Compromises GICSP Practice Questions (Page 3)

Questions 11–15

Which wireless encryption protocol uses a 24-bit initialization vector (IV) that is transmitted in plaintext, leading to IV collisions that allow an attacker to recover the encryption key after capturing enough packets?

A security analyst is performing a wireless survey and discovers a network that is not broadcasting its SSID. The analyst suspects it is a hidden network used by a nearby industrial facility. Which technique is most effective for discovering this hidden network?

Keep studying — Threats, Vulnerabilities, and Compromises