A small water treatment facility uses WPA2-PSK for its operational Wi-Fi. An auditor notes that the pre-shared key is a simple dictionary word. Which attack is the most immediate risk, and which control should be prioritized?

Deauthentication attack; enable 802.1X authentication

Evil twin attack; deploy a wireless intrusion prevention system

Rogue access point; enable MAC filtering

Offline dictionary attack against the WPA2 four-way handshake; implement WPA3 or a strong passphrase

A company is deploying a new wireless network for a temporary construction site. The site will be operational for six months, and the network will be used by contractors with personal devices. The security team wants to provide secure access while minimizing administrative overhead. Which solution is most appropriate?

Deploy WPA2-PSK with a strong passphrase and change it weekly.

Implement WPA2-Enterprise with 802.1X and issue temporary credentials to each contractor.

Set up an open network with a captive portal that requires a daily password.

Use WPA3-SAE with a single shared passphrase for all contractors.

A manufacturing plant has a mix of modern and legacy wireless devices. The security team must upgrade the wireless security to meet compliance requirements, but the legacy devices only support WPA2-PSK. The team also needs to detect rogue access points. Budget is limited, and the team cannot replace the legacy devices this year. Which approach best balances security and feasibility?

Use WPA2-Enterprise with 802.1X for all devices, even those that only support WPA2-PSK.

Keep WPA2-PSK for all devices and rely on a WIPS to detect rogue APs.

Deploy WPA3-SAE for modern devices and create a separate VLAN with WPA2-PSK for legacy devices, monitored by a WIPS.

Force all devices to use WPA3-SAE and disable WPA2-PSK to eliminate the weak protocol.

GIAC Global Industrial Cyber Security Professional

Domain 2Objective 3

Wireless Technologies & Compromises GICSP Practice Questions (Page 4)

Part of the Threats, Vulnerabilities, and Compromises domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 6–11 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 16–20

16application · medium
A small water treatment facility uses WPA2-PSK for its operational Wi-Fi. An auditor notes that the pre-shared key is a simple dictionary word. Which attack is the most immediate risk, and which control should be prioritized?
Select an answer first
17foundation · easy
Which wireless reconnaissance technique involves passively capturing frames transmitted over the air to analyze network traffic, identify devices, and potentially extract sensitive information?
Select an answer first
18expert · hard
A company is deploying a new wireless network for a temporary construction site. The site will be operational for six months, and the network will be used by contractors with personal devices. The security team wants to provide secure access while minimizing administrative overhead. Which solution is most appropriate?
Select an answer first
19expert · hard
A manufacturing plant has a mix of modern and legacy wireless devices. The security team must upgrade the wireless security to meet compliance requirements, but the legacy devices only support WPA2-PSK. The team also needs to detect rogue access points. Budget is limited, and the team cannot replace the legacy devices this year. Which approach best balances security and feasibility?
Select an answer first
20foundation · easy
An attacker sets up a wireless access point with the same SSID as a legitimate corporate network, hoping to trick users into connecting to it. Which wireless attack vector does this describe?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.

Wireless Technologies & Compromises GICSP Practice Questions (Page 4)

Questions 16–20

A small water treatment facility uses WPA2-PSK for its operational Wi-Fi. An auditor notes that the pre-shared key is a simple dictionary word. Which attack is the most immediate risk, and which control should be prioritized?

Which wireless reconnaissance technique involves passively capturing frames transmitted over the air to analyze network traffic, identify devices, and potentially extract sensitive information?

An attacker sets up a wireless access point with the same SSID as a legitimate corporate network, hoping to trick users into connecting to it. Which wireless attack vector does this describe?

Keep studying — Threats, Vulnerabilities, and Compromises