GSLC · Question #187
You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?
The correct answer is D. Site surveys. Wireless site surveys are the most effective method to detect and locate rogue access points by physically enumerating every AP broadcasting in a facility.
Question
You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?
Options
- ANetwork anti-spyware software
- BProtocol analyzers
- CNetwork anti-virus software
- DSite surveys
How the community answered
(37 responses)- A16% (6)
- B5% (2)
- C5% (2)
- D73% (27)
Why each option
Wireless site surveys are the most effective method to detect and locate rogue access points by physically enumerating every AP broadcasting in a facility.
Anti-spyware software targets malicious programs running on endpoint systems and has no mechanism to discover unauthorized wireless hardware attached to the network infrastructure.
Protocol analyzers passively capture and decode network traffic on a specific segment but do not scan the RF environment to systematically enumerate all broadcasting access points.
Anti-virus software detects and removes malware on host systems and cannot identify or physically locate rogue wireless hardware devices.
A wireless site survey uses RF scanning tools to discover all access points broadcasting within a physical environment, allowing administrators to compare discovered APs against an approved inventory and identify unauthorized devices. Unlike software-only solutions, site surveys detect any rogue AP regardless of its SSID or IP configuration, and the physical sweep provides location data needed to remove the device.
Concept tested: Detecting rogue wireless access points via site surveys
Source: https://csrc.nist.gov/publications/detail/sp/800-153/final
Topics
Community Discussion
No community discussion yet for this question.