nerdexam
GIAC

GSLC · Question #187

You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?

The correct answer is D. Site surveys. Wireless site surveys are the most effective method to detect and locate rogue access points by physically enumerating every AP broadcasting in a facility.

Security Architecture & Engineering

Question

You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?

Options

  • ANetwork anti-spyware software
  • BProtocol analyzers
  • CNetwork anti-virus software
  • DSite surveys

How the community answered

(37 responses)
  • A
    16% (6)
  • B
    5% (2)
  • C
    5% (2)
  • D
    73% (27)

Why each option

Wireless site surveys are the most effective method to detect and locate rogue access points by physically enumerating every AP broadcasting in a facility.

ANetwork anti-spyware software

Anti-spyware software targets malicious programs running on endpoint systems and has no mechanism to discover unauthorized wireless hardware attached to the network infrastructure.

BProtocol analyzers

Protocol analyzers passively capture and decode network traffic on a specific segment but do not scan the RF environment to systematically enumerate all broadcasting access points.

CNetwork anti-virus software

Anti-virus software detects and removes malware on host systems and cannot identify or physically locate rogue wireless hardware devices.

DSite surveysCorrect

A wireless site survey uses RF scanning tools to discover all access points broadcasting within a physical environment, allowing administrators to compare discovered APs against an approved inventory and identify unauthorized devices. Unlike software-only solutions, site surveys detect any rogue AP regardless of its SSID or IP configuration, and the physical sweep provides location data needed to remove the device.

Concept tested: Detecting rogue wireless access points via site surveys

Source: https://csrc.nist.gov/publications/detail/sp/800-153/final

Topics

#rogue access points#wireless security#site surveys#WLAN detection

Community Discussion

No community discussion yet for this question.

Full GSLC Practice