Download Certified Wireless Security Auditor Exam and more Exams Technology in PDF only on Docsity!
Certified Wireless Security Auditor Practice Exam
Q1: What does WLAN stand for? A. Wireless Local Area Network B. Wide Local Access Network C. Wireless Long-range Area Network D. Wired Local Access Network Answer: A Explanation: WLAN stands for Wireless Local Area Network, which is a network that covers a small geographic area using wireless communication. Q2: Which wireless protocol is most commonly used for home and office networks? A. Bluetooth B. Zigbee C. Wi-Fi D. NFC Answer: C Explanation: Wi-Fi is the most widely used protocol for wireless networking in homes and offices. Q3: What is a key difference between wired and wireless networks? A. Wired networks use radio waves while wireless networks use cables. B. Wired networks require physical cables, whereas wireless networks use electromagnetic signals. C. Wireless networks are always more secure than wired networks. D. Wired networks do not support high-speed data transmission. Answer: B Explanation: The primary difference is that wired networks require physical cabling, whereas wireless networks rely on electromagnetic signals for data transmission. Q4: Which frequency band is commonly used by Wi-Fi networks? A. 900 MHz B. 2.4 GHz C. 5 GHz D. Both B and C Answer: D Explanation: Wi-Fi networks typically operate in both the 2.4 GHz and 5 GHz frequency bands. Q5: What does WPA3 primarily improve upon compared to WPA2? A. Frequency range B. Encryption strength and security protocols C. Network speed D. Device compatibility
Answer: B Explanation: WPA3 offers enhanced encryption and improved security protocols compared to WPA2, making wireless networks more secure. Q6: Which of the following is an example of a WPAN? A. Wi-Fi network in a coffee shop B. A home network connecting smartphones and tablets via Bluetooth C. Enterprise-level wireless LAN D. Satellite communications Answer: B Explanation: WPAN (Wireless Personal Area Network) refers to a network for interconnecting devices within the range of an individual person, such as Bluetooth connections between smartphones and tablets. Q7: What is the primary role of 802.1X in wireless security? A. Encrypting data packets B. Providing a framework for network access control C. Managing wireless channels D. Reducing signal interference Answer: B Explanation: 802.1X is used as a framework for port-based network access control, ensuring that only authorized devices can connect. Q8: Which standard is often used with 802.1X for centralized authentication? A. RADIUS B. TACACS+ C. SNMP D. DHCP Answer: A Explanation: RADIUS (Remote Authentication Dial-In User Service) is commonly paired with 802.1X for centralized authentication of users. Q9: Which encryption protocol is recommended for modern wireless networks due to its robustness? A. WEP B. TKIP C. WPA2 with AES D. None of the above Answer: C Explanation: WPA2 with AES encryption is recommended because it provides strong security compared to older protocols like WEP and TKIP. Q10: Which of the following best describes a Man-in-the-Middle (MITM) attack? A. Directly injecting malware into a device B. Intercepting communications between two parties without their knowledge
Q15: What is a common vulnerability associated with using WEP? A. It uses strong encryption keys. B. It is resistant to brute force attacks. C. It employs static keys that are easily compromised. D. It supports dynamic key exchange. Answer: C Explanation: WEP (Wired Equivalent Privacy) is vulnerable because it uses static encryption keys that can be easily broken. Q16: Which of the following is a key regulatory body involved in wireless communications in the United States? A. FCC B. FDA C. EPA D. SEC Answer: A Explanation: The FCC (Federal Communications Commission) regulates wireless communications and related issues in the United States. Q17: What is the purpose of a captive portal in wireless networks? A. To improve network speed B. To provide a web page for user authentication before granting network access C. To enhance encryption protocols D. To filter out malicious traffic Answer: B Explanation: A captive portal redirects users to a web page where they must authenticate before accessing the network. Q18: Which of the following best describes TKIP? A. A modern encryption method used in WPA B. An older encryption protocol designed to replace WEP but now considered less secure C. A protocol used exclusively for Bluetooth communications D. A type of network scanning tool Answer: B Explanation: TKIP (Temporal Key Integrity Protocol) was introduced to replace WEP but has since been found to be less secure than newer methods. Q19: What is a primary benefit of implementing VPN integration in a wireless network? A. Increased network speed B. Enhanced privacy through encrypted communication C. Simplified network management D. Extended wireless range
Answer: B Explanation: VPNs (Virtual Private Networks) provide enhanced privacy by encrypting data transmitted over wireless networks. Q20: Which tool is commonly used for wireless packet sniffing and analysis? A. Nmap B. Wireshark C. Metasploit D. Nessus Answer: B Explanation: Wireshark is a widely used tool for capturing and analyzing wireless network packets. Q21: What does the term “rogue access point” refer to in wireless security? A. An access point that is deliberately set up by the network administrator B. An unauthorized access point installed on a secure network C. A device used to extend wireless coverage D. A backup system for network connectivity Answer: B Explanation: A rogue access point is an unauthorized device that has been connected to a secure network, potentially compromising security. Q22: Which of the following is a characteristic of a DoS attack in wireless networks? A. It enhances network performance. B. It involves flooding the network with excessive traffic to disrupt services. C. It encrypts data packets for secure transmission. D. It requires physical access to the access point. Answer: B Explanation: A Denial of Service (DoS) attack overwhelms the network with traffic, causing legitimate services to be disrupted. Q23: What is the role of Mobile Device Management (MDM) in wireless networks? A. To increase the wireless signal range B. To enforce security policies on connected mobile devices C. To act as a network firewall D. To scan for rogue devices Answer: B Explanation: MDM solutions help enforce security policies and manage the configuration of mobile devices that connect to a wireless network. Q24: Which wireless standard is designed for short-range, low-power communication often used in IoT devices? A. Wi-Fi B. Bluetooth
B. To detect and prevent intrusions and malicious activities in wireless networks C. To manage IP address allocation D. To enhance the range of wireless signals Answer: B Explanation: Wireless IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) are designed to monitor and protect networks from malicious activities. Q30: Which of the following is a key legal consideration during a wireless security audit? A. Increasing network speed B. Ensuring compliance with data privacy and interception laws C. Reducing hardware costs D. Improving user interface designs Answer: B Explanation: Auditors must adhere to legal and ethical guidelines, including data privacy and interception laws, during a wireless security audit. Q31: What does the term “Evil Twin” refer to in wireless security? A. A legitimate access point with dual SSIDs B. A counterfeit access point that mimics a genuine one C. A backup server for wireless authentication D. An encrypted connection between two devices Answer: B Explanation: An Evil Twin attack involves creating a counterfeit access point that mimics a legitimate one to deceive users. Q32: Which factor is critical when configuring a wireless access point (WAP)? A. The color of the device B. Proper placement to optimize coverage and minimize interference C. The brand of the cable used D. The physical size of the access point Answer: B Explanation: Proper placement of a WAP is crucial to ensure optimal coverage and reduce interference from obstacles and other devices. Q33: In terms of compliance, what does GDPR focus on? A. Financial transactions B. Data protection and privacy for individuals in the EU C. Medical records management D. Wireless network performance Answer: B Explanation: GDPR (General Data Protection Regulation) focuses on data protection and privacy for individuals within the European Union.
Q34: What is the primary goal of wireless network segmentation? A. To reduce the cost of hardware B. To isolate different network segments for improved security and performance C. To increase the number of available channels D. To simplify the authentication process Answer: B Explanation: Network segmentation isolates different parts of the network, thereby enhancing security and reducing the impact of a breach. Q35: Which encryption method is most vulnerable to dictionary and brute force attacks? A. WPA2 with AES B. WPA C. WEP D. VPN encryption Answer: C Explanation: WEP is highly vulnerable to dictionary and brute force attacks due to its weak encryption algorithm. Q36: What is the function of a packet sniffer in wireless security auditing? A. To create network maps B. To capture and analyze data packets transmitted over the network C. To provide wireless coverage extension D. To assign IP addresses to devices Answer: B Explanation: Packet sniffers capture and analyze data packets, which is critical for identifying insecure transmissions and network vulnerabilities. Q37: How does a DoS attack differ from a DDoS attack? A. DoS uses multiple sources, while DDoS uses a single source. B. DoS uses a single source to flood the network, while DDoS uses multiple sources simultaneously. C. They are exactly the same. D. DoS targets only wired networks, while DDoS targets wireless networks. Answer: B Explanation: A DoS (Denial of Service) attack originates from a single source, while a DDoS (Distributed Denial of Service) attack uses multiple sources to overwhelm the network. Q38: What is one of the main reasons for implementing patch management in wireless networks? A. To improve signal strength B. To update firmware and fix security vulnerabilities C. To change the network’s SSID automatically D. To increase the number of connected devices
C. To extend the wireless range D. To replace outdated hardware Answer: B Explanation: A wireless security audit aims to identify vulnerabilities and evaluate the effectiveness of current security practices and defenses. Q44: Which of the following is a best practice for wireless network security in an enterprise environment? A. Using default passwords B. Implementing role-based access control (RBAC) C. Disabling encryption D. Allowing unrestricted guest access Answer: B Explanation: Role-based access control (RBAC) limits access based on a user’s role and is a best practice in enterprise wireless security. Q45: What is one of the primary benefits of using wireless IDS/IPS systems? A. They physically secure the access points. B. They help detect and block malicious network activity. C. They manage IP address allocation. D. They provide automated firmware updates. Answer: B Explanation: Wireless IDS/IPS systems monitor network traffic to detect and block suspicious or malicious activities, thereby improving network security. Q46: Which of the following is a characteristic of an effective incident response plan for wireless networks? A. It ignores previous security breaches. B. It outlines clear procedures for identifying, containing, and resolving incidents. C. It eliminates the need for forensic analysis. D. It solely focuses on hardware replacement. Answer: B Explanation: An effective incident response plan includes clear procedures for identifying, containing, and resolving security incidents, ensuring a timely and coordinated response. Q47: What is the primary role of a wireless controller in a network? A. To assign IP addresses B. To manage and configure multiple wireless access points centrally C. To boost signal strength D. To encrypt data packets Answer: B Explanation: A wireless controller centrally manages multiple access points, ensuring consistent configuration and enhanced security across the network.
Q48: In the context of wireless auditing, what is vulnerability scanning? A. A method to increase wireless signal range B. The process of identifying security weaknesses within a network C. A technique for improving device performance D. A way to encrypt data packets Answer: B Explanation: Vulnerability scanning involves identifying potential security weaknesses in the network that could be exploited by attackers. Q49: Which of the following is NOT typically a wireless network threat? A. Rogue access points B. Phishing emails C. Jamming attacks D. Packet sniffing Answer: B Explanation: Phishing emails are generally a threat to wired and wireless networks alike but are not specific to the wireless medium like rogue APs, jamming, or packet sniffing. Q50: What does the acronym IEEE stand for in the context of wireless communication standards? A. International Electrical Equipment Enterprise B. Institute of Electrical and Electronics Engineers C. International Engineering and Energy Experts D. Integrated Electronics and Energy Answer: B Explanation: IEEE stands for the Institute of Electrical and Electronics Engineers, which develops standards for wireless and other technologies. Q51: Which component is essential for conducting a comprehensive wireless network mapping? A. An RF analyzer B. A high-speed router C. A digital camera D. A network printer Answer: A Explanation: An RF analyzer is used to measure and map wireless signals, which is essential for comprehensive network mapping. Q52: What is a common consequence of using default passwords on wireless devices? A. Improved network performance B. Increased vulnerability to unauthorized access C. Extended device warranty D. Enhanced encryption capabilities
C. It is the only encryption method available for wireless networks. D. It is only used for non-critical data. Answer: B Explanation: AES encryption provides strong security and is preferred over older, less secure methods such as WEP or TKIP. Q58: Which wireless protocol is particularly designed for low-power, low-data-rate applications in IoT devices? A. Wi-Fi B. Bluetooth Low Energy (BLE) C. LTE D. 802.11ac Answer: B Explanation: Bluetooth Low Energy (BLE) is designed specifically for low-power and low-data-rate applications, making it ideal for many IoT devices. Q59: What is the primary purpose of a wireless penetration test? A. To improve signal strength B. To identify and exploit vulnerabilities in the wireless network C. To update the firmware automatically D. To map the physical layout of an office Answer: B Explanation: Wireless penetration testing is performed to identify and exploit vulnerabilities in a controlled manner, helping to secure the network. Q60: Which factor is critical when selecting tools for a wireless security audit? A. The aesthetic design of the tool’s interface B. The ability to accurately detect and report vulnerabilities C. The price of the tool D. The tool’s compatibility with gaming consoles Answer: B Explanation: The primary consideration is the tool’s effectiveness in detecting and reporting vulnerabilities to improve network security. Q61: What is a common use of the tool Aircrack-ng in wireless security? A. Managing wireless access points B. Cracking WEP/WPA keys through packet capture and analysis C. Enhancing the wireless signal range D. Providing VPN services Answer: B Explanation: Aircrack-ng is widely used for cracking WEP and WPA keys by capturing and analyzing wireless packets.
Q62: Which aspect of wireless security does the term “BYOD” address? A. The integration of enterprise-grade routers B. The challenges and security risks associated with employees using their own devices C. The technical specifications of wireless standards D. The physical installation of access points Answer: B Explanation: BYOD (Bring Your Own Device) policies introduce challenges regarding device security and management when employees use personal devices for work. Q63: Which encryption protocol was specifically designed to address vulnerabilities in WEP? A. WPA B. WPA C. SSL D. IPSec Answer: A Explanation: WPA (Wi-Fi Protected Access) was designed as an interim solution to fix the vulnerabilities found in WEP. Q64: What is one of the main security benefits of segmenting a wireless network using VLANs? A. It simplifies device configuration. B. It isolates network traffic, reducing the impact of potential breaches. C. It increases the overall bandwidth of the network. D. It automatically encrypts all data transmissions. Answer: B Explanation: VLANs (Virtual Local Area Networks) isolate traffic, so if one segment is compromised, the breach does not necessarily affect the entire network. Q65: What does the term “wireless forensics” refer to? A. The process of extending wireless network range B. The analysis and investigation of wireless network breaches C. The installation of new access points D. The development of new wireless protocols Answer: B Explanation: Wireless forensics involves analyzing and investigating incidents involving wireless networks to identify the source and method of breaches. Q66: Which of the following is a common tool used for detecting rogue access points? A. Kismet B. Microsoft Word C. Adobe Acrobat D. VLC Media Player
C. To replace the need for encryption D. To manage hardware inventory Answer: B Explanation: Wireless security policies establish guidelines and rules that help ensure the secure use and management of wireless networks. Q72: Which of the following describes a vulnerability that can occur from using outdated firmware on wireless devices? A. Enhanced encryption strength B. Exposure to known security exploits C. Automatic network segmentation D. Increased device compatibility Answer: B Explanation: Outdated firmware may contain unpatched vulnerabilities that can be exploited by attackers. Q73: Which wireless technology is primarily used for short-range communications between personal devices? A. Wi-Fi B. Bluetooth C. Zigbee D. LTE Answer: B Explanation: Bluetooth is designed for short-range communications between personal devices such as headsets, smartphones, and speakers. Q74: What is the purpose of using an encryption protocol in a wireless network? A. To increase signal range B. To protect data from being intercepted and read by unauthorized parties C. To manage IP addresses D. To automatically configure access points Answer: B Explanation: Encryption protocols secure data by converting it into a coded format, protecting it from interception by unauthorized users. Q75: Which factor is most critical when planning the radio frequency (RF) environment for a wireless network? A. The brand of the wireless devices B. Minimizing interference and optimizing channel selection C. The color of the access point casings D. The number of connected printers
Answer: B Explanation: Effective RF planning involves selecting channels and configuring power levels to minimize interference and maximize coverage. Q76: What does the term “penetration testing” refer to in the context of wireless security? A. Physically inspecting wireless hardware B. Simulating attacks to identify vulnerabilities C. Upgrading the wireless firmware D. Measuring the strength of wireless signals Answer: B Explanation: Penetration testing involves simulating cyber-attacks on a network to uncover vulnerabilities that could be exploited by attackers. Q77: What role does a wireless scanner play in security auditing? A. It encrypts network data automatically. B. It detects and reports on active wireless networks and devices. C. It increases the number of available channels. D. It assigns IP addresses to connected devices. Answer: B Explanation: Wireless scanners are used to detect active networks and devices, providing valuable information for security audits. Q78: Which of the following describes a common issue with poorly configured wireless access points? A. They often have enhanced encryption methods. B. They may inadvertently allow unauthorized access due to weak security settings. C. They automatically update their firmware. D. They restrict the number of connected users. Answer: B Explanation: Poor configuration of access points can lead to weak security, making it easier for attackers to gain unauthorized access. Q79: What is the primary purpose of using a wireless intrusion detection system (IDS)? A. To boost the wireless signal strength B. To monitor network traffic for suspicious activity C. To physically secure the access points D. To automatically segment the network Answer: B Explanation: A wireless IDS continuously monitors network traffic for anomalies and potential threats, helping to detect intrusions. Q80: Which of the following is an example of a regulatory compliance requirement in wireless security? A. Using default passwords B. Adhering to FCC rules on wireless spectrum usage
B. Establishing clear communication channels and procedures for containment and recovery C. Disabling all encryption D. Automatically expanding the network coverage Answer: B Explanation: A robust incident response plan includes clear procedures and communication channels to quickly contain and recover from an incident. Q86: What is the primary purpose of wireless traffic analysis during a security audit? A. To boost network throughput B. To detect unusual patterns that may indicate a security breach C. To reduce hardware costs D. To extend the wireless signal range Answer: B Explanation: Traffic analysis helps identify unusual patterns in network usage that could indicate a breach or other security issues. Q87: Which wireless security protocol is known for providing forward secrecy? A. WEP B. WPA2 with AES C. WPA D. TKIP Answer: C Explanation: WPA3 provides forward secrecy, ensuring that the compromise of one session does not affect the security of previous sessions. Q88: What is one of the main advantages of using a centralized wireless controller? A. It increases the physical size of the network hardware. B. It allows for uniform security policies and easier management across multiple access points. C. It reduces the need for encryption. D. It automatically increases the signal strength of all access points. Answer: B Explanation: Centralized controllers simplify management by applying uniform configurations and security policies across all access points. Q89: Which of the following best explains the term “packet sniffing”? A. Capturing and analyzing data packets transmitted over a network B. Encrypting packets before transmission C. Assigning IP addresses to network devices D. Physically inspecting network cables Answer: A Explanation: Packet sniffing involves capturing and analyzing network packets to monitor data traffic and identify potential security issues.
Q90: What is the primary role of VPN integration in wireless security? A. To extend the wireless signal range B. To provide a secure tunnel for data transmission over untrusted networks C. To manage network hardware D. To automatically configure access points Answer: B Explanation: VPN integration creates a secure tunnel that encrypts data, ensuring secure communication over potentially untrusted networks. Q91: Which of the following is an example of an ethical consideration in wireless security auditing? A. Hacking into personal devices B. Obtaining proper authorization before testing the network C. Ignoring privacy laws D. Disclosing vulnerabilities publicly without permission Answer: B Explanation: Ethical auditing requires proper authorization and adherence to legal guidelines to protect privacy and avoid unauthorized access. Q92: What is one of the major threats associated with Bring Your Own Device (BYOD) policies in wireless networks? A. Enhanced encryption methods B. Increased risk of malware and data leakage from unmanaged devices C. Improved network speed D. Automatic device synchronization Answer: B Explanation: BYOD policies can increase the risk of malware infection and data leakage since personal devices may not be as secure as corporate-managed ones. Q93: In wireless security, what is the main purpose of implementing role-based access control (RBAC)? A. To automatically encrypt data B. To restrict network access based on user roles and responsibilities C. To increase the number of available channels D. To extend the network’s physical range Answer: B Explanation: RBAC restricts network access according to the specific roles and responsibilities of users, thereby enhancing overall security. Q94: What is the primary goal of a simulated exam in the context of CWSA certification preparation? A. To increase network traffic B. To assess a candidate’s readiness and identify areas for improvement C. To automatically configure network settings D. To replace real-world experience
