GPEN · Question #109
You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?
The correct answer is A. Site surveys. Site surveys are the most effective method to detect rogue wireless access points by physically scanning the environment and comparing discovered APs against authorized ones.
Question
You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?
Options
- ASite surveys
- BProtocol analyzers
- CNetwork anti-spyware software
- DNetwork anti-virus software
How the community answered
(70 responses)- A70% (49)
- B9% (6)
- C17% (12)
- D4% (3)
Why each option
Site surveys are the most effective method to detect rogue wireless access points by physically scanning the environment and comparing discovered APs against authorized ones.
A wireless site survey involves using scanning tools to enumerate all access points broadcasting within a facility, allowing administrators to identify any APs not on the approved list. This method detects rogues regardless of whether they appear in management software. Follow-up physical inspection can then locate and remove unauthorized devices.
Protocol analyzers capture and decode network traffic but cannot reliably enumerate all wireless APs across the physical environment or identify their physical location.
Anti-spyware software targets malicious software installed on endpoints and has no capability to detect unauthorized network hardware devices.
Anti-virus software detects and removes malware from host systems and cannot identify rogue hardware devices attached to the network.
Concept tested: Rogue AP detection using wireless site surveys
Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/RogueWP.html
Topics
Community Discussion
No community discussion yet for this question.