A company wants to provide guest Wi-Fi for visitors. The guest network must be isolated from the corporate network, but visitors need internet access. The company also wants to prevent guests from scanning or attacking each other. Which configuration is most effective?

Use a single SSID for both corporate and guest traffic.

Hide the guest SSID and enable MAC filtering.

Use WPA2-Personal with a passphrase posted in the lobby.

Place the guest network on a separate VLAN with client isolation and firewall rules allowing only internet access.

A small clinic uses WPA2-Personal with a shared passphrase for its guest Wi-Fi. After a staff member shares the passphrase with a patient, the clinic wants to reduce the risk of unauthorized access without replacing the access points. Which action best addresses the immediate risk?

Enable MAC filtering to allow only registered devices.

Reduce the transmit power of the access points to limit coverage.

Change the passphrase to a new strong value and communicate it only to staff.

Enable SSID hiding so the network name no longer appears in scans.

Employees at a branch office report intermittent Wi-Fi disconnects. A security scan reveals a device with the same SSID as the corporate network is broadcasting from a nearby conference room. The device is not an authorized access point. What is the immediate risk and the best first response?

It is a wireless repeater; add it to the network to improve coverage.

It is a deauthentication attack; update the WPA2 passphrase.

It is a neighbor's access point; ignore it because it is not on the corporate network.

It is a rogue AP that could intercept traffic; locate and disconnect it.

A company wants to provide Wi-Fi to visitors but does not want to expose the internal network. They also want to prevent visitors from seeing each other's traffic. Which configuration is most appropriate?

Create an open guest SSID and rely on a firewall to block internal access.

Create a guest SSID with WPA2-Personal, place it on a separate VLAN, and enable client isolation.

Use the same SSID as the internal network but with a different passphrase.

Use WPA3-Personal with a shared passphrase and no VLAN.

GIAC Security Essentials

Domain 2Objective 4

Wireless Network Security GSEC Practice Questions (Page 7)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 31–35

31expert · hard
A company wants to provide guest Wi-Fi for visitors. The guest network must be isolated from the corporate network, but visitors need internet access. The company also wants to prevent guests from scanning or attacking each other. Which configuration is most effective?
Select an answer first
32application · medium
A small clinic uses WPA2-Personal with a shared passphrase for its guest Wi-Fi. After a staff member shares the passphrase with a patient, the clinic wants to reduce the risk of unauthorized access without replacing the access points. Which action best addresses the immediate risk?
Select an answer first
33foundation · easy
Which wireless authentication method uses a single pre-shared passphrase that is shared among all users and is commonly used in home networks?
Select an answer first
34application · medium
Employees at a branch office report intermittent Wi-Fi disconnects. A security scan reveals a device with the same SSID as the corporate network is broadcasting from a nearby conference room. The device is not an authorized access point. What is the immediate risk and the best first response?
Select an answer first
35application · medium
A company wants to provide Wi-Fi to visitors but does not want to expose the internal network. They also want to prevent visitors from seeing each other's traffic. Which configuration is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.