Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in…

Question

Options

• AHost-based assessment
• BWireless network assessment
• CApplication assessment
• DDistributed assessment

• A
  11% (3)
• B
  78% (21)
• C
  7% (2)
• D
  4% (1)

Explanation

Wireless Network Assessment (B) is correct because Johnson's investigation directly involves a rogue access point - a wireless network threat - and he is specifically testing for weak and outdated wireless security mechanisms (such as WEP or weak WPA configurations) that are vulnerable to authentication cracking attacks. This scenario is a textbook example of evaluating wireless infrastructure security.

Why the distractors are wrong:

• A (Host-based) focuses on vulnerabilities within individual hosts/endpoints (OS, patches, configurations), not wireless infrastructure.
• C (Application assessment) targets software applications for vulnerabilities like SQL injection or XSS, unrelated to access point threats.
• D (Distributed assessment) evaluates vulnerabilities across multiple interconnected systems/networks simultaneously, which is not the focus here.

Memory Tip: Whenever you see keywords like "rogue access point," "wireless traffic," or "authentication cracking over Wi-Fi", immediately associate them with Wireless Network Assessment - if the attack vector is airborne, so is the assessment type! Think: "Rogue AP = Wireless VA."

No community discussion yet for this question.