Security Concepts JN0-452 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which security policy setting should be applied to a guest WLAN to prevent guests from accessing internal corporate resources?

   • AAccess control lists (ACLs) that restrict traffic to the guest VLAN
   • BDisabling SSID broadcast
   • CUsing WPA3 Personal instead of WPA2 Enterprise
   • DStronger encryption, such as AES-256
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A hospital's security team suspects that an unauthorized access point has been connected to the wired network, offering a rogue SSID that mimics the hospital's guest network. The team wants to automatically detect and block this threat using the Mist infrastructure. What should the administrator configure?

   • AConfigure a firewall rule to block the rogue AP's MAC address
   • BEnable Rogue AP Detection and configure the WIPS policy to contain the rogue AP
   • CDisable the SSID broadcast on all legitimate APs
   • DManually scan the facility with a spectrum analyzer
   Reveal Solution Discussion Select an answer first
3. 28expert · medium

   A security auditor is reviewing a WLAN that uses WPA2-Personal. The auditor notes that the pre-shared key is a simple dictionary word. The company wants to improve security without changing the authentication method. What should the administrator do?

   • AChange the pre-shared key to a long, complex passphrase
   • BEnable WPA3-Personal with SAE
   • CEnable MAC filtering
   • DDisable SSID broadcast
   Reveal Solution Discussion Select an answer first