A hospital's wireless network uses WPA2-Enterprise. Staff report intermittent disconnections near the MRI suite. A wireless survey shows high channel utilization and frequent deauthentication frames. Which combination of factors is most likely causing the issue, and what is the best first step?

Clients are roaming to a rogue AP; disable roaming on all clients.

Interference from medical equipment and possible deauthentication attack; perform a spectrum analysis and adjust channels.

The RADIUS server is failing; restart the RADIUS service.

The network is overloaded; add more access points in the area.

A company wants to provide Wi-Fi to guests but is concerned about liability if guests use the network for illegal activities. They also want to ensure that guests cannot access internal resources. Which approach best addresses both concerns?

Use a captive portal with terms of service and place the guest network on a separate VLAN with firewall rules blocking internal access.

Use WPA2-Personal with a passphrase printed on a receipt.

Use an open network with no authentication and rely on the ISP to log traffic.

Use the same SSID as the internal network but with a different VLAN.

A company is deploying WPA2-Enterprise with PEAP-MSCHAPv2. A security review notes that user credentials could be captured in an evil twin attack. The company wants to maintain compatibility with older devices that do not support EAP-TLS. Which change would most improve security without breaking those devices?

Switch to WPA2-Personal with a long passphrase.

Disable SSID broadcast to hide the network.

Implement server-side certificate validation and use a strong RADIUS shared secret.

A small business uses WPA2-Personal for its office Wi-Fi. The owner wants to improve security without buying new hardware. Which combination of measures is most effective?

Hide the SSID and enable MAC filtering.

Use a strong passphrase, enable management frame protection, and apply firmware updates.

Use WPA3-Personal and disable WPA2.

Change the SSID to a non-descriptive name and reduce signal power.

A company is replacing old WEP-based access points. They want to ensure that wireless traffic is protected against offline dictionary attacks and that each user has a unique key. Which combination should they choose?

WPA-Enterprise with WEP for backward compatibility.

WPA2-Enterprise with EAP-TLS and AES-CCMP.

WPA3-Personal with a short passphrase.

GIAC Security Essentials

Domain 2Objective 4

Wireless Network Security GSEC Practice Questions (Page 2)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 6–10

6expert · hard
A hospital's wireless network uses WPA2-Enterprise. Staff report intermittent disconnections near the MRI suite. A wireless survey shows high channel utilization and frequent deauthentication frames. Which combination of factors is most likely causing the issue, and what is the best first step?
Select an answer first
7expert · hard
A company wants to provide Wi-Fi to guests but is concerned about liability if guests use the network for illegal activities. They also want to ensure that guests cannot access internal resources. Which approach best addresses both concerns?
Select an answer first
8expert · hard
A company is deploying WPA2-Enterprise with PEAP-MSCHAPv2. A security review notes that user credentials could be captured in an evil twin attack. The company wants to maintain compatibility with older devices that do not support EAP-TLS. Which change would most improve security without breaking those devices?
Select an answer first
9application · medium
A small business uses WPA2-Personal for its office Wi-Fi. The owner wants to improve security without buying new hardware. Which combination of measures is most effective?
Select an answer first
10application · medium
A company is replacing old WEP-based access points. They want to ensure that wireless traffic is protected against offline dictionary attacks and that each user has a unique key. Which combination should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.