A company wants to deploy a wireless network for a temporary event. They have a limited budget and need to provide internet access to 200 attendees. They also want to prevent attendees from accessing internal resources. Which approach is most cost-effective and secure?

Use a single SSID for both internal and guest traffic to save costs.

Deploy an open network with a captive portal and no encryption.

Deploy a guest SSID with WPA2-Personal, place it on a separate VLAN, and use a firewall to block internal access.

Deploy WPA3-Enterprise with 802.1X and RADIUS for all attendees.

Which countermeasure is most effective at preventing an attacker from successfully performing a deauthentication attack against wireless clients?

Using WPA3 with PMF (Protected Management Frames)

A hospital wants to prevent patients from accessing the internal medical device network while still providing internet access in the waiting room. Which network design best achieves this?

Disable the guest SSID and provide internet access via cellular hotspots.

Use WPA2-Personal with a strong passphrase for both staff and guests.

Create separate SSIDs for guest and internal networks, place them on different VLANs, and enforce firewall rules between them.

Use a single SSID and rely on MAC filtering to block patient devices.

A company has a mix of legacy devices that only support WPA2 and modern devices that support WPA3. They want to maximize security while maintaining compatibility. They also need to support 802.1X with RADIUS for enterprise authentication. Which configuration should they implement?

Use WPA3-Enterprise with a fallback to WPA2-Enterprise on the same SSID, and configure RADIUS to support both.

Use WPA3-Personal with a shared passphrase for all devices.

Use WPA2-Enterprise only, because WPA3 is not compatible with RADIUS.

Use WPA2-Personal with a long passphrase for all devices.

GIAC Security Essentials

Domain 2Objective 4

Wireless Network Security GSEC Practice Questions (Page 3)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 11–15

11expert · hard
A company wants to deploy a wireless network for a temporary event. They have a limited budget and need to provide internet access to 200 attendees. They also want to prevent attendees from accessing internal resources. Which approach is most cost-effective and secure?
Select an answer first
12foundation · easy
Which countermeasure is most effective at preventing an attacker from successfully performing a deauthentication attack against wireless clients?
Select an answer first
13application · medium
A hospital wants to prevent patients from accessing the internal medical device network while still providing internet access in the waiting room. Which network design best achieves this?
Select an answer first
14foundation · easy
Which wireless encryption protocol introduced the use of AES-CCMP as the mandatory encryption method and is widely considered the minimum standard for modern Wi-Fi security?
Select an answer first
15expert · hard
A company has a mix of legacy devices that only support WPA2 and modern devices that support WPA3. They want to maximize security while maintaining compatibility. They also need to support 802.1X with RADIUS for enterprise authentication. Which configuration should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.