GPEN · Question #362
Which of the following security policies will you implement to keep safe your data when you connect your Laptop to the office network over IEEE 802.11 WLANs? Each correct answer represents a complete
The correct answer is A. Using personal firewall software on your Laptop. D. Using an IPSec enabled VPN for remote connectivity.. Securing laptop data over 802.11 WLANs requires both a personal firewall to control endpoint traffic and an IPSec VPN to encrypt data in transit.
Question
Which of the following security policies will you implement to keep safe your data when you connect your Laptop to the office network over IEEE 802.11 WLANs? Each correct answer represents a complete solution. Choose two.
Options
- AUsing personal firewall software on your Laptop.
- BUsing a protocol analyzer on your Laptop to monitor for risks.
- CUsing portscanner like nmap in your network.
- DUsing an IPSec enabled VPN for remote connectivity.
How the community answered
(54 responses)- A83% (45)
- B6% (3)
- C11% (6)
Why each option
Securing laptop data over 802.11 WLANs requires both a personal firewall to control endpoint traffic and an IPSec VPN to encrypt data in transit.
Personal firewall software enforces inbound and outbound traffic rules on the laptop itself, blocking unauthorized connections that are especially risky on the broadcast-based 802.11 wireless medium. This provides host-level protection even when the underlying network cannot be fully trusted.
A protocol analyzer passively captures and displays traffic for analysis but provides no active protection against threats on the WLAN.
A port scanner such as nmap is a reconnaissance and auditing tool used to discover open ports; it does not protect data and is not a client-side security policy.
An IPSec-enabled VPN creates an encrypted, authenticated tunnel between the laptop and the office network, ensuring data confidentiality and integrity. Even if an attacker captures wireless frames through passive eavesdropping, the IPSec layer prevents the payload from being read or tampered with.
Concept tested: WLAN client data protection - firewall and VPN policies
Source: https://csrc.nist.gov/publications/detail/sp/800-153/final
Topics
Community Discussion
No community discussion yet for this question.