A company's security policy requires that only company-issued laptops can connect to the internal Wi-Fi. The network currently uses WPA2-Enterprise with PEAP-MSCHAPv2. Which additional control would most effectively enforce this policy?

Require users to enter a long shared passphrase in addition to their username.

Enable MAC address filtering on the access points.

Set the SSID to hidden so only company laptops can find it.

Deploy EAP-TLS with client certificates issued by the company's PKI.

A university wants to provide Wi-Fi to students and faculty using their existing Active Directory credentials. The network team wants to avoid managing a separate wireless password and wants to ensure that each user's traffic is encrypted. Which authentication method should they implement?

WPA2-Personal with a shared passphrase distributed to all students and faculty.

WPA2-Enterprise with 802.1X and PEAP or EAP-TLS.

Open authentication with a captive portal that asks for Active Directory credentials.

WPA3-Personal with a long passphrase.

A small clinic uses WPA2-Personal with a shared passphrase for its staff Wi-Fi. After a staff laptop is stolen, the IT admin discovers the passphrase was written on a sticky note attached to the laptop. The admin wants to reduce the risk that the stolen credential can be used to join the network. Which action is the most effective immediate step?

Enable SSID hiding so the network name is not broadcast.

Reduce the wireless signal power so the network is only reachable inside the clinic.

Enable MAC address filtering to allow only known devices.

Change the WPA2 passphrase and update all authorized devices.

GIAC Security Essentials

Domain 2Objective 4

Wireless Network Security GSEC Practice Questions (Page 6)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 26–30

26application · medium
A company's security policy requires that only company-issued laptops can connect to the internal Wi-Fi. The network currently uses WPA2-Enterprise with PEAP-MSCHAPv2. Which additional control would most effectively enforce this policy?
Select an answer first
27application · medium
A university wants to provide Wi-Fi to students and faculty using their existing Active Directory credentials. The network team wants to avoid managing a separate wireless password and wants to ensure that each user's traffic is encrypted. Which authentication method should they implement?
Select an answer first
28foundation · easy
Which wireless security best practice is primarily intended to prevent attackers from easily identifying and targeting a specific wireless network?
Select an answer first
29application · medium
A small clinic uses WPA2-Personal with a shared passphrase for its staff Wi-Fi. After a staff laptop is stolen, the IT admin discovers the passphrase was written on a sticky note attached to the laptop. The admin wants to reduce the risk that the stolen credential can be used to join the network. Which action is the most effective immediate step?
Select an answer first
30foundation · easy
In WPA2-Enterprise, which protocol is used to authenticate users individually against a central authentication server such as RADIUS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Wireless Network Security GSEC Practice Questions (Page 6)

Questions 26–30

A company's security policy requires that only company-issued laptops can connect to the internal Wi-Fi. The network currently uses WPA2-Enterprise with PEAP-MSCHAPv2. Which additional control would most effectively enforce this policy?

A university wants to provide Wi-Fi to students and faculty using their existing Active Directory credentials. The network team wants to avoid managing a separate wireless password and wants to ensure that each user's traffic is encrypted. Which authentication method should they implement?

Which wireless security best practice is primarily intended to prevent attackers from easily identifying and targeting a specific wireless network?

In WPA2-Enterprise, which protocol is used to authenticate users individually against a central authentication server such as RADIUS?

Keep studying — Network Security