nerdexam
GIAC

GAWN · Question #51

An auditor sees that clients accept any server certificate during PEAP. Which mitigation is BEST?

The correct answer is B. Enforce certificate validation, pin expected server identity, and use proper MDM profiles. You've hit your limit · resets 1pm (America/New_York)

Wireless Network Auditing and Defense

Question

An auditor sees that clients accept any server certificate during PEAP. Which mitigation is BEST?

Options

  • AUse shorter PSKs
  • BEnforce certificate validation, pin expected server identity, and use proper MDM profiles
  • CEnable SSID hiding
  • DUse channel 13

How the community answered

(29 responses)
  • A
    21% (6)
  • B
    69% (20)
  • C
    3% (1)
  • D
    7% (2)

Explanation

You've hit your limit · resets 1pm (America/New_York)

Topics

#PEAP#certificate validation#EAP security#MDM profiles

Community Discussion

No community discussion yet for this question.

Full GAWN Practice