1.) d. All of the above
A WIDS may gather information from all of these sources, including purpose-built hardware sensors, conventional APs in monitor-only mode, conventional APs that perform part-time monitoring and rogue connectivity checks that are performed over the wired network.
<< Back to quiz
2.) c. Rogue containment
Every WIDS discovers wireless devices and detects at least some wireless attacks. Most (but not all) provide some method of location tracking. What differentiates a WIPS from a WIDS is the ability to take preventative action, like invoking a containment method to prevent legitimate stations from maintaining associations with rogue APs.
<< Back to quiz
3.) a. Signature matching
Many WIDS recognize common war driving and attack tools like NetStumbler by matching observed traffic to a known pattern (i.e., signature).
<< Back to quiz
4.) a. Placing a cardboard box over the rogue to conceal it
An intruder might try to hide a rogue from view, but a cardboard box is not an effective method of containing the rogue -- that is, preventing the rogue from doing harm. Wireless transmissions pass through cardboard, drywall, wood, brick and other building materials, which is why a rogue can wreak havoc even when located outside your facility.
<< Back to quiz
5.) d. Site calibration
Of these methods, nearest sensor yields the largest search area, but requires the least effort to set up. At the opposite end of the spectrum, site calibration can produce estimates accurate to within a few feet, but achieving that accuracy requires taking painstaking measurements throughout the WLAN's entire footprint to enable later comparison.
>> Take the final exam
<< Return to Lesson 4 quiz
<< Return to Wireless Security Lunchtime Learning
