CND Wireless Network Security 3

Question 1

Which wireless intrusion detection/prevention capability detects rogue access points by comparing detected BSSIDs against an authorized AP list and alerts on unauthorized devices?

Accepted Answer

Wireless IDS (WIDS) with AP monitoring

Answer

Network Access Control (NAC) enforcement

Answer

DHCP snooping on the wired switch

Answer

ARP inspection on the distribution layer

Question 2

A CND practitioner wants to isolate wireless guest users from the internal corporate network while using the same physical AP infrastructure. Which technology best achieves this?

Accepted Answer

VLAN-based SSID segmentation with separate VLANs per SSID

Answer

MAC address filtering on the AP

Answer

Disabling DHCP for guest clients

Answer

Enabling WPS on the guest SSID

Question 3

When conducting a wireless site survey for security planning, what is the primary purpose of measuring RF signal coverage patterns?

Accepted Answer

To locate coverage gaps and signal bleed beyond the facility perimeter that could be exploited

Answer

To identify the DHCP scope needed for wireless clients

Answer

To determine the number of user licenses needed for the WLAN controller

Answer

To configure the correct 802.11 amendment on each access point

Question 4

Which countermeasure directly protects against evil twin attacks by cryptographically binding the network identity to the authentication exchange?

Accepted Answer

Using certificate-based mutual authentication (EAP-TLS) with 802.1X

Answer

Hiding the SSID in beacon frames

Answer

Enabling MAC address filtering on the legitimate AP

Answer

Setting maximum transmit power to overpower the rogue AP

Question 5

A security team uses Aircrack-ng to test their wireless network. After capturing the 4-way handshake, what additional step is required to attempt to recover the WPA2-PSK?

Accepted Answer

Run a dictionary or brute-force attack against the captured handshake offline

Answer

Replay the handshake packets to force re-authentication

Answer

Inject deauthentication frames to obtain the session key directly

Answer

Perform ARP poisoning to redirect traffic through the attacker machine

Question 6

Which 802.11 amendment introduced Protected Management Frames (PMF), providing authentication for management frames to mitigate deauthentication and disassociation attacks?

Accepted Answer

802.11w

Answer

802.11i

Answer

802.11r

Answer

802.11k

Question 7

A network defender wants to prevent wireless clients from communicating directly with each other on the same AP while still allowing internet access. Which AP feature accomplishes this?

Accepted Answer

Client isolation (AP isolation / PSPF)

Answer

WMM (Wi-Fi Multimedia) QoS profiles

Answer

Band steering to separate client types

Answer

Beamforming to direct signals toward the router