A university wants to provide Wi-Fi to students and faculty using their existing Active Directory credentials. They also need to support devices that do not support WPA3-Enterprise. Which configuration provides the best balance of security and compatibility?

Deploy WPA2-Enterprise with 802.1X and RADIUS, using PEAP or EAP-TLS.

Deploy an open network and require users to log in through a captive portal.

Deploy WPA3-Personal with a single shared passphrase.

Deploy WPA2-Personal with a long passphrase shared with all students and faculty.

A company has a WPA2-Enterprise network. The security team wants to prevent users from connecting to rogue APs. They deploy a wireless intrusion prevention system (WIPS) that can automatically block rogue APs. However, the WIPS occasionally blocks legitimate guest APs set up by employees for presentations. What is the best way to balance security and usability?

Disable the WIPS to avoid blocking legitimate APs.

Use a longer SSID for the corporate network so rogue APs are easier to identify.

Implement a rogue AP policy that requires employees to register temporary APs, and configure the WIPS to allow registered APs.

Require all employees to use a VPN when on Wi-Fi.

A security analyst notices a spike in deauthentication frames on the corporate Wi-Fi. Users are being disconnected repeatedly. Which attack is most likely occurring, and which mitigation is most effective?

A deauthentication attack; enable management frame protection (802.11w).

A MAC spoofing attack; enable MAC filtering.

An eavesdropping attack; switch to WPA3-Personal.

A rogue AP attack; change the SSID.

A retail store currently uses WEP for its legacy barcode scanners. The scanners are being replaced with modern handheld devices that support WPA2 and WPA3. The store wants to improve wireless security without replacing the access points, which support WPA2-Enterprise and WPA3-Personal. Which configuration provides the strongest security for the new devices?

Use WPA3-Personal with a strong passphrase.

Keep WEP enabled until all devices are replaced, then switch to WPA2-Personal.

Enable WPA2-Personal with a long passphrase and disable WEP.

Configure WPA2-Enterprise with 802.1X and a RADIUS server.

An organization is migrating from WPA2-Personal to WPA3-Enterprise. They have a large number of legacy IoT devices that only support WPA2-Personal. The security team wants to avoid a costly device replacement. Which migration strategy is most secure while maintaining functionality?

Create a separate SSID for legacy IoT devices using WPA2-Personal and place it on an isolated VLAN with strict firewall rules.

Use WPA3-Personal for all devices and disable WPA2 support.

Keep WPA2-Personal for all devices and do not migrate.

Upgrade all IoT devices to support WPA3-Enterprise.

GIAC Security Essentials

Domain 2Objective 4

Wireless Network Security GSEC Practice Questions (Page 1)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 1–5

1application · medium
A university wants to provide Wi-Fi to students and faculty using their existing Active Directory credentials. They also need to support devices that do not support WPA3-Enterprise. Which configuration provides the best balance of security and compatibility?
Select an answer first
2expert · hard
A company has a WPA2-Enterprise network. The security team wants to prevent users from connecting to rogue APs. They deploy a wireless intrusion prevention system (WIPS) that can automatically block rogue APs. However, the WIPS occasionally blocks legitimate guest APs set up by employees for presentations. What is the best way to balance security and usability?
Select an answer first
3application · medium
A security analyst notices a spike in deauthentication frames on the corporate Wi-Fi. Users are being disconnected repeatedly. Which attack is most likely occurring, and which mitigation is most effective?
Select an answer first
4application · medium
A retail store currently uses WEP for its legacy barcode scanners. The scanners are being replaced with modern handheld devices that support WPA2 and WPA3. The store wants to improve wireless security without replacing the access points, which support WPA2-Enterprise and WPA3-Personal. Which configuration provides the strongest security for the new devices?
Select an answer first
5expert · hard
An organization is migrating from WPA2-Personal to WPA3-Enterprise. They have a large number of legacy IoT devices that only support WPA2-Personal. The security team wants to avoid a costly device replacement. Which migration strategy is most secure while maintaining functionality?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Wireless Network Security GSEC Practice Questions (Page 1)

Questions 1–5

A university wants to provide Wi-Fi to students and faculty using their existing Active Directory credentials. They also need to support devices that do not support WPA3-Enterprise. Which configuration provides the best balance of security and compatibility?

A security analyst notices a spike in deauthentication frames on the corporate Wi-Fi. Users are being disconnected repeatedly. Which attack is most likely occurring, and which mitigation is most effective?

An organization is migrating from WPA2-Personal to WPA3-Enterprise. They have a large number of legacy IoT devices that only support WPA2-Personal. The security team wants to avoid a costly device replacement. Which migration strategy is most secure while maintaining functionality?

Keep studying — Network Security