A security auditor finds that a company's wireless network uses WPA2-Personal with a short passphrase. The auditor recommends upgrading to WPA3-Personal. The company has a mix of devices, some of which do not support WPA3. Which action should the company take to improve security while maintaining compatibility?

Upgrade all devices to support WPA3-Personal.

Keep WPA2-Personal but increase the passphrase length.

Enable WPA3-Personal with a long passphrase and enable transition mode for WPA2 devices.

Use WPA2-Enterprise with PEAP instead of WPA3-Personal.

During a site survey, an analyst discovers an unauthorized access point connected to the corporate network that is broadcasting the same SSID as the legitimate network. The analyst suspects an attacker is using it to capture credentials. Which immediate action should the analyst take?

Increase the encryption strength from WPA2 to WPA3 on the legitimate network.

Disconnect the rogue AP from the network and locate it using a wireless scanner.

Enable MAC filtering on the legitimate access points.

Change the SSID of the legitimate network to a new name.

A security analyst notices a large number of deauthentication frames being sent to clients on the corporate WPA2-Enterprise network. Clients are disconnecting and reconnecting repeatedly. Which mitigation is most effective against this type of attack?

Enable management frame protection (802.11w) on the access points and clients.

Increase the transmit power of the access points.

Change the SSID to a hidden name.

Switch from WPA2-Enterprise to WPA2-Personal.

GIAC Security Essentials

Domain 2Objective 4

Wireless Network Security GSEC Practice Questions (Page 5)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 21–25

21foundation · easy
In wireless networking, which security principle is primarily concerned with ensuring that transmitted data is not altered or intercepted in a way that changes its content?
Select an answer first
22expert · hard
A security auditor finds that a company's wireless network uses WPA2-Personal with a short passphrase. The auditor recommends upgrading to WPA3-Personal. The company has a mix of devices, some of which do not support WPA3. Which action should the company take to improve security while maintaining compatibility?
Select an answer first
23application · medium
During a site survey, an analyst discovers an unauthorized access point connected to the corporate network that is broadcasting the same SSID as the legitimate network. The analyst suspects an attacker is using it to capture credentials. Which immediate action should the analyst take?
Select an answer first
24foundation · easy
A wireless network is experiencing intermittent connectivity where legitimate users are unable to associate with the access point. Which core security principle is being violated?
Select an answer first
25application · medium
A security analyst notices a large number of deauthentication frames being sent to clients on the corporate WPA2-Enterprise network. Clients are disconnecting and reconnecting repeatedly. Which mitigation is most effective against this type of attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Wireless Network Security GSEC Practice Questions (Page 5)

Questions 21–25

In wireless networking, which security principle is primarily concerned with ensuring that transmitted data is not altered or intercepted in a way that changes its content?

During a site survey, an analyst discovers an unauthorized access point connected to the corporate network that is broadcasting the same SSID as the legitimate network. The analyst suspects an attacker is using it to capture credentials. Which immediate action should the analyst take?

A wireless network is experiencing intermittent connectivity where legitimate users are unable to associate with the access point. Which core security principle is being violated?

A security analyst notices a large number of deauthentication frames being sent to clients on the corporate WPA2-Enterprise network. Clients are disconnecting and reconnecting repeatedly. Which mitigation is most effective against this type of attack?

Keep studying — Network Security