nerdexam
EC-Council

312-50V10 · Question #3

Which of these is capable of searching for and locating rogue access points?

The correct answer is D. WIPS. A Wireless Intrusion Prevention System (WIPS) is specifically designed to monitor wireless radio spectrum and detect unauthorized or rogue access points. No other listed system operates at the wireless layer with this capability.

Hacking Wireless Networks

Question

Which of these is capable of searching for and locating rogue access points?

Options

  • AHIDS
  • BNIDS
  • CWISS
  • DWIPS

How the community answered

(26 responses)
  • A
    4% (1)
  • D
    96% (25)

Why each option

A Wireless Intrusion Prevention System (WIPS) is specifically designed to monitor wireless radio spectrum and detect unauthorized or rogue access points. No other listed system operates at the wireless layer with this capability.

AHIDS

HIDS (Host-based Intrusion Detection System) monitors activity on individual host machines such as file changes and process activity, and has no capability to scan wireless RF spectrum for rogue APs.

BNIDS

NIDS (Network-based Intrusion Detection System) inspects wired network traffic for malicious patterns but does not monitor wireless radio frequencies or detect unauthorized wireless access points.

CWISS

WISS is not a recognized standard security system acronym and does not correspond to any established intrusion detection or prevention technology.

DWIPSCorrect

WIPS (Wireless Intrusion Prevention System) continuously scans the RF spectrum for wireless devices and can identify, locate, and block rogue access points by comparing detected APs against a list of authorized devices. It is the only system in the list purpose-built for wireless threat detection and rogue AP containment.

Concept tested: Wireless intrusion prevention and rogue AP detection

Source: https://csrc.nist.gov/publications/detail/sp/800-153/final

Topics

#WIPS#rogue access points#wireless intrusion prevention#802.11 security

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice