Wireless Network Security GSEC Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   An employee reports that their laptop frequently disconnects from the corporate Wi-Fi and reconnects to a network with a similar name. A quick scan shows an access point with the same SSID but a different MAC address. Which attack is most likely occurring, and which control should be implemented first?

   • ARogue AP / evil twin; deploy 802.1X with certificate-based authentication to validate the network.
   • BDeauthentication attack; enable MAC filtering on the corporate AP.
   • CKRACK attack; update all clients to the latest WPA2 drivers.
   • DJamming attack; increase transmit power on the corporate AP.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which wireless encryption protocol uses a 128-bit key but is considered fundamentally insecure because it can be cracked in minutes using tools like Aircrack-ng?

   • AWPA
   • BWEP
   • CWPA3
   • DWPA2
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A coffee shop offers free Wi-Fi to customers. The owner wants to prevent customers from accessing the shop's internal point-of-sale (POS) system, which is on the same network. Which action is the most effective?

   • AHide the SSID of the customer Wi-Fi.
   • BUse WPA2-Personal with a passphrase posted in the shop.
   • CPlace the customer Wi-Fi on a separate VLAN with firewall rules blocking access to the POS network.
   • DEnable MAC filtering on the customer Wi-Fi.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security team is investigating a wireless attack. They notice that clients are being deauthenticated and then reconnecting to an access point with a stronger signal that is not on the approved AP list. The rogue AP is using the same SSID and encryption as the legitimate network. Which combination of controls would best mitigate this attack?

   • ADeploy 802.1X with EAP-TLS and enable management frame protection (802.11w).
   • BEnable MAC filtering and change the SSID to a hidden name.
   • CIncrease transmit power on legitimate APs to override the rogue signal.
   • DUse WPA2-Personal with a stronger passphrase.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Why is regularly updating the firmware of wireless access points considered a critical security best practice?

   • AIt enables the latest encryption protocols without user intervention.
   • BIt automatically changes the Wi-Fi password to a stronger one.
   • CIt patches known vulnerabilities and security flaws in the device.
   • DIt improves the wireless signal range and performance.
   Reveal Solution Discussion Select an answer first