CWS Risk Assessment & Mitigation 3

Question 1

During a site survey, an analyst detects a wireless client probe-requesting an SSID named 'Free_Airport_WiFi' in a corporate office. What security concern does this indicate?

Accepted Answer

The client is vulnerable to an evil twin attack targeting that remembered network

Answer

Probe requests for remembered SSIDs allow nearby attackers to create a matching evil twin AP that the client may automatically connect to, bypassing user awareness.

Question 2

Which of the following BEST describes the risk associated with using WPS PIN authentication on a wireless router?

Accepted Answer

WPS PIN is vulnerable to online brute-force due to a design flaw splitting the PIN into two halves

Answer

The WPS PIN has a design flaw where it is validated in two separate halves (4+3 digits), reducing the effective keyspace from 10^7 to about 11,000 combinations, making it trivially brute-forceable.

Question 3

A risk assessment identifies that wireless clients in a hospital are using open (unencrypted) Wi-Fi to access the EHR system via HTTPS. Which residual risk remains even with HTTPS?

Accepted Answer

SSL stripping attacks can downgrade HTTPS connections if HSTS is not implemented

Answer

Without HSTS (HTTP Strict Transport Security), a man-in-the-middle attacker on the open network can perform SSL stripping to downgrade HTTPS connections to unencrypted HTTP.

Question 4

What is the primary risk of using a shared PSK (pre-shared key) for a large number of employees on a corporate wireless network?

Accepted Answer

A single compromised employee exposes the entire network, and rekeying requires updating all devices

Answer

With a shared PSK, one compromised credential exposes the entire network, and rotating the key requires reconfiguring every device, making credential management operationally challenging.

Question 5

An organization wants to assess the risk from nearby competing businesses' Wi-Fi networks. What specific threat should they evaluate?

Accepted Answer

Accidental client association to neighboring networks exposing corporate traffic

Answer

Accidental association occurs when corporate devices connect to similarly named or open neighboring networks, potentially exposing sensitive data to untrusted networks.

(CWS) Certified Wireless Specialist Practice Test

(CWS) Certified Wireless Specialist Practice Test

CWS Risk Assessment & Mitigation 3