nerdexam
GIAC

GPEN · Question #109

You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?

The correct answer is A. Site surveys. Site surveys are the most effective method to detect rogue wireless access points by physically scanning the environment and comparing discovered APs against authorized ones.

Penetration Testing Foundations & Reconnaissance

Question

You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?

Options

  • ASite surveys
  • BProtocol analyzers
  • CNetwork anti-spyware software
  • DNetwork anti-virus software

How the community answered

(70 responses)
  • A
    70% (49)
  • B
    9% (6)
  • C
    17% (12)
  • D
    4% (3)

Why each option

Site surveys are the most effective method to detect rogue wireless access points by physically scanning the environment and comparing discovered APs against authorized ones.

ASite surveysCorrect

A wireless site survey involves using scanning tools to enumerate all access points broadcasting within a facility, allowing administrators to identify any APs not on the approved list. This method detects rogues regardless of whether they appear in management software. Follow-up physical inspection can then locate and remove unauthorized devices.

BProtocol analyzers

Protocol analyzers capture and decode network traffic but cannot reliably enumerate all wireless APs across the physical environment or identify their physical location.

CNetwork anti-spyware software

Anti-spyware software targets malicious software installed on endpoints and has no capability to detect unauthorized network hardware devices.

DNetwork anti-virus software

Anti-virus software detects and removes malware from host systems and cannot identify rogue hardware devices attached to the network.

Concept tested: Rogue AP detection using wireless site surveys

Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/RogueWP.html

Topics

#rogue access point#wireless security#site survey#network monitoring

Community Discussion

No community discussion yet for this question.

Full GPEN Practice