nerdexam
GIAC

GAWN · Question #20

GAWN Question #20: Real Exam Question with Answer & Explanation

Sign in or unlock GAWN to reveal the answer and full explanation for question #20. The question stem and answer options stay visible for context.

Question

Which audit evidence BEST supports a finding of "rogue AP" presence?

Options

  • AOne probe request for an unknown SSID
  • BWired-side switchport MAC showing an unauthorized AP OUI and DHCP leases behind it
  • CA single low RSSI spike
  • DHigh retransmission rate

Unlock GAWN to see the answer

You've previewed enough free GAWN questions. Unlock GAWN for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full GAWN Practice