CWNA Risk Assessment & Management 2

Question 1

A risk assessment reveals that a wireless network in a hospital has a high likelihood of interference from medical devices. What risk treatment option involves accepting the risk without mitigation?

Accepted Answer

Risk acceptance

Answer

Risk acceptance means acknowledging the risk and choosing to operate without implementing controls, often because the cost of mitigation exceeds the potential loss.

Question 2

Which quantitative risk metric expresses the expected monetary loss from a specific threat occurring once?

Accepted Answer

Single Loss Expectancy (SLE)

Answer

Single Loss Expectancy (SLE) = Asset Value × Exposure Factor and represents the expected dollar loss per individual occurrence of a threat.

Question 3

During a wireless site survey, an assessor discovers rogue APs transmitting on DFS channels. Why is this particularly concerning from a risk perspective?

Accepted Answer

Rogue APs on DFS channels can cause radar interference and regulatory violations

Answer

DFS channels require radar detection compliance; rogue APs operating on these channels risk causing interference with radar systems and violating FCC regulations.

Question 4

A company wants to reduce the impact of a successful evil twin attack against its employees. Which control most directly addresses this risk?

Accepted Answer

Requiring mutual authentication via 802.1X/EAP

Answer

Mutual authentication in 802.1X/EAP requires both the client and server to prove their identity, preventing clients from connecting to fraudulent APs that cannot present a valid server certificate.

Question 5

An organization's risk register shows a vulnerability rated 'Critical' with a threat likelihood of 'Low.' How should this be prioritized relative to a 'High' vulnerability with 'High' likelihood?

Accepted Answer

The High/High risk typically has a higher overall risk score

Answer

Risk = Likelihood × Impact, so a High severity with High likelihood usually produces a higher calculated risk score than Critical severity with Low likelihood.

CWNA - Wireless Network Administrator Practice Test

CWNA - Wireless Network Administrator Practice Test

CWNA Risk Assessment & Management 2