Wireless Network Analysis GNFA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   You are analyzing a wireless capture to determine if a user's device roamed from one AP to another. Which sequence of frames would confirm a successful roaming event?

   • AAn association request to the new AP without any prior disassociation.
   • BA probe response from the new AP, followed by a disassociation from the old AP.
   • CA deauthentication frame from the new AP, followed by a probe request.
   • DA disassociation frame from the old AP, followed by an association request and response from the new AP.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a Wireshark capture, which field in an Association Request frame uniquely identifies the client attempting to join a network?

   • ASource MAC address
   • BSSID
   • CBSSID
   • DSequence number
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which characteristic in a beacon frame is most useful for identifying a rogue access point that is impersonating a legitimate network?

   • ABSSID
   • BChannel
   • CSSID
   • DSupported rates
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In wireless geolocation, what does trilateration use to estimate a device's position?

   • ASignal strength measurements from at least three access points
   • BMAC address and SSID
   • CEncryption type and channel
   • DSequence numbers and timestamps
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a wireless capture, a client sending repeated probe requests for the same SSID over time is most likely doing what?

   • AAttempting to connect to a known network
   • BSending a beacon frame
   • CPerforming a deauthentication attack
   • DConducting a rogue AP scan
   Reveal Solution Discussion Select an answer first