nerdexam
GIAC

GPEN · Question #362

Which of the following security policies will you implement to keep safe your data when you connect your Laptop to the office network over IEEE 802.11 WLANs? Each correct answer represents a complete

The correct answer is A. Using personal firewall software on your Laptop. D. Using an IPSec enabled VPN for remote connectivity.. Securing laptop data over 802.11 WLANs requires both a personal firewall to control endpoint traffic and an IPSec VPN to encrypt data in transit.

Reporting & Remediation

Question

Which of the following security policies will you implement to keep safe your data when you connect your Laptop to the office network over IEEE 802.11 WLANs? Each correct answer represents a complete solution. Choose two.

Options

  • AUsing personal firewall software on your Laptop.
  • BUsing a protocol analyzer on your Laptop to monitor for risks.
  • CUsing portscanner like nmap in your network.
  • DUsing an IPSec enabled VPN for remote connectivity.

How the community answered

(54 responses)
  • A
    83% (45)
  • B
    6% (3)
  • C
    11% (6)

Why each option

Securing laptop data over 802.11 WLANs requires both a personal firewall to control endpoint traffic and an IPSec VPN to encrypt data in transit.

AUsing personal firewall software on your Laptop.Correct

Personal firewall software enforces inbound and outbound traffic rules on the laptop itself, blocking unauthorized connections that are especially risky on the broadcast-based 802.11 wireless medium. This provides host-level protection even when the underlying network cannot be fully trusted.

BUsing a protocol analyzer on your Laptop to monitor for risks.

A protocol analyzer passively captures and displays traffic for analysis but provides no active protection against threats on the WLAN.

CUsing portscanner like nmap in your network.

A port scanner such as nmap is a reconnaissance and auditing tool used to discover open ports; it does not protect data and is not a client-side security policy.

DUsing an IPSec enabled VPN for remote connectivity.Correct

An IPSec-enabled VPN creates an encrypted, authenticated tunnel between the laptop and the office network, ensuring data confidentiality and integrity. Even if an attacker captures wireless frames through passive eavesdropping, the IPSec layer prevents the payload from being read or tampered with.

Concept tested: WLAN client data protection - firewall and VPN policies

Source: https://csrc.nist.gov/publications/detail/sp/800-153/final

Topics

#WLAN security policy#IPSec VPN#personal firewall#wireless hardening

Community Discussion

No community discussion yet for this question.

Full GPEN Practice