A hospital's wireless intrusion detection system (WIDS) alerts on an unknown access point broadcasting the same SSID as the legitimate network but with a different BSSID and stronger signal. Which type of attack is most likely occurring, and what should the response be?

Evil twin attack; locate and physically remove the unauthorized access point

Wardriving incident; ignore the alert because the signal is stronger

Deauthentication attack; change the SSID to a new name

Rogue access point; immediately disconnect the legitimate access points to prevent confusion

Which of the following is a common anomaly that a wireless intrusion detection system might flag as a potential compromise?

A sudden increase in deauthentication frames

A new client connecting with a valid pre-shared key

A firmware update on an access point

A decrease in network traffic during off-hours

Which security control uses an authentication server to provide per-user credentials for wireless network access, rather than a shared passphrase?

Wireless intrusion prevention system (WIPS)

A legacy industrial control system network uses WEP for wireless communication with field devices. The security team is planning an upgrade but must maintain compatibility with the old devices. Which interim control is most effective to reduce the risk of WEP being exploited?

Use a longer WEP key (128-bit instead of 64-bit)

Implement MAC filtering on the access points

Isolate the WEP network on a separate VLAN with strict firewall rules and monitor for anomalies

GIAC Global Industrial Cyber Security Professional

Domain 2Objective 3

Wireless Technologies & Compromises GICSP Practice Questions (Page 7)

Part of the Threats, Vulnerabilities, and Compromises domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 6–11 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

5concepts

Questions 31–34

31application · medium
A hospital's wireless intrusion detection system (WIDS) alerts on an unknown access point broadcasting the same SSID as the legitimate network but with a different BSSID and stronger signal. Which type of attack is most likely occurring, and what should the response be?
Select an answer first
32foundation · easy
Which of the following is a common anomaly that a wireless intrusion detection system might flag as a potential compromise?
Select an answer first
33foundation · easy
Which security control uses an authentication server to provide per-user credentials for wireless network access, rather than a shared passphrase?
Select an answer first
34application · medium
A legacy industrial control system network uses WEP for wireless communication with field devices. The security team is planning an upgrade but must maintain compatibility with the old devices. Which interim control is most effective to reduce the risk of WEP being exploited?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.