Wireless Security
Lunchtime Learning |
By Lisa Phifer
Take this final exam to see how much you learned in Wireless Security Lunchtime Learning.
1.) Your company is subject to regulations that require privacy for data sent over any network. Which of the following can help your WLAN meet that requirement?
a. 802.1X/EAP-TLS
b. WPA TKIP
c. WPA2 AES-CCMP
d. All of the above
Answer
2.) Your company has decided to ban wireless usage for now, and you have been assigned to develop a plan to enforce that policy at corporate headquarters and over 500 branch offices. Which of the following tools should you choose?
a. Wireless intrusion detection system
b. Wireless spectrum analyzer
c. Wireless network stumbler
d. All of the above
Answer
3.) Your company uses RSA SecurID token authentication in its remote access VPN and would like to re-use those credentials on its WLAN. Which type of Extensible Authentication Protocol should you choose for use with 802.1X?
a. EAP-TLS
b. PEAPv0
c. PEAPv1
d. EAP-SIM
Answer
4.) Your corporate WLAN uses WEP encryption and 802.1X/LEAP authentication. Which of the following upgrades will provide the most security benefit?
a. WPA-Personal
b. WPA-Enterprise with PEAP
c. WPA2-Enterprise with PEAP
d. WPA2-Enterprise with LEAP
Answer
5.) You are responsible for creating wireless security guidelines for teleworkers. Which of the following WLAN security measures will you recommend?
a. VLAN
b. VPN
c. MAC ACL
d. WEP
Answer
6.) You want to offer visitors wireless Internet access from your conference rooms. You know better than to drop a wireless AP onto your corporate LAN. What should you use to create a barrier between visitors and your wired LAN?
a. Firewall demilitarized zone (DMZ)
b. VPN gateway
c. Network access controller
d. 802.1X on the visitor AP
Answer
7.) Your company is deploying VoIP and would like to use VoWiFi phones for in-building voice communication between employees. If you could purchase VoWiFi handsets that supported 802.1X, which type of Extensible Authentication Protocol would best meet your VoIP user authentication needs?
a. EAP-AKA
b. EAP-FAST
c. EAP-SIM
d. EAP-TLS
Answer
8.) To reduce the risk of connecting to an evil twin AP, which of the following measures would you recommend adopting?
a. Wireless intrusion prevention system
b. Managed wireless client configurations
c. 802.1X with mutual authentication
d. All of the above
Answer
9.) You are responsible for trouble-shooting performance problems in an 802.11b/g network and have just received several alerts from your wireless IDS. Which of the following alerts suggests that there may be a configuration error?
a. Radar interference detected
b. 802.11g AP not using protection
c. AP power save DTIM violation
d. Hidden station detected
Answer
10.) You have decided to use VLANs to segregate wireless traffic. Which of the following standards should you look for in your AP and switch spec sheets?
a. 802.1AB
b. 802.1F
c. 802.1Q
d. 802.1V
Answer
<< Return to Wireless Security Lunchtime Learning
