nerdexam
GIAC

GAWN · Question #20

Which audit evidence BEST supports a finding of "rogue AP" presence?

The correct answer is B. Wired-side switchport MAC showing an unauthorized AP OUI and DHCP leases behind it. You've hit your limit · resets 1pm (America/New_York)

Wireless Network Auditing and Defense

Question

Which audit evidence BEST supports a finding of "rogue AP" presence?

Options

  • AOne probe request for an unknown SSID
  • BWired-side switchport MAC showing an unauthorized AP OUI and DHCP leases behind it
  • CA single low RSSI spike
  • DHigh retransmission rate

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    71% (15)
  • C
    10% (2)
  • D
    14% (3)

Explanation

You've hit your limit · resets 1pm (America/New_York)

Topics

#rogue AP#OUI detection#wired-side audit#MAC address

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GAWN Practice