CWSP Wireless Intrusion Prevention Quiz

1. Which tool or technique is used to perform a site survey for WIPS deployment?

Passive RF scanning and signal strength mapping

Packet sniffing only

Port scanning

Active DNS queries

2. What is the primary benefit of implementing threat intelligence in a WIPS?

Correlate detected threats with known attack signatures and tactics

Eliminate all wireless traffic

Reduce wireless network bandwidth

Replace the need for access point passwords

3. Which encryption cipher is recommended for WPA2/WPA3 to prevent known attacks?

AES-CCMP

TKIP

WEP

RC4

4. In wireless intrusion prevention, what role does network segmentation play?

Limits lateral movement if a wireless client is compromised

Increases wireless signal strength

Eliminates the need for authentication

Prevents all wireless attacks

5. What threat does packet injection pose in wireless networks?

Injected frames can trigger vulnerabilities or manipulate network behavior

It only affects wired connections

It prevents all wireless communication

It upgrades access point firmware

6. Which of the following is a characteristic of a successful WIPS deployment?

100% RF coverage with overlapping sensors

Single access point monitoring

Manual threat response only

Disabling all wireless encryption

7. What is the primary advantage of using WIPS over traditional wireless access point security logs?

Real-time threat detection across the entire wireless environment

Lower cost of deployment

No need for encryption

Eliminates the need for firewalls

8. Which response action should a WIPS take when detecting a rogue access point?

Alert administrators and optionally transmit de-authentication frames

Immediately shut down all wireless networks

Modify client MAC addresses

Change the network SSID automatically

9. In WIPS, what is the significance of monitoring for unusual beacon frames?

Detect rogue or misconfigured access points

Verify DNS resolution

Ensure WEP encryption is active

Monitor DHCP lease times

10. What does WPS (Wi-Fi Protected Setup) vulnerability allow attackers to do?

Bypass WPA/WPA2 encryption using PIN attacks

View encrypted traffic directly

Modify MAC addresses

Create new user accounts

11. What is the primary purpose of wireless intrusion prevention systems (WIPS)?

Detect and prevent unauthorized wireless access and attacks

Encrypt all wireless traffic automatically

Replace traditional firewalls entirely

Monitor only wired network traffic

12. What is the purpose of client isolation in wireless networks?

Prevent clients from communicating with each other

Block all internet access

Encrypt all wireless frames

Reduce power consumption

13. Which authentication method is most resistant to brute-force attacks in wireless networks?

WEP with 40-bit encryption

WPA2 with AES-CCMP and strong passwords

Open authentication

Shared key authentication

14. In wireless intrusion prevention, what does 'geofencing' refer to?

Defining geographic boundaries where wireless access is permitted

Blocking all international IP addresses

Using GPS to locate rogue devices

Filtering traffic based on country of origin

15. What is a de-authentication attack used to accomplish?

Force clients to disconnect and reconnect to capture credentials

Permanently block a device from the network

Encrypt wireless traffic

Upgrade firmware on access points

16. Which protocol vulnerability does the KRACK attack specifically target?

WPA2 four-way handshake

WEP shared key authentication

TKIP encryption

Open system authentication

17. What does RF (radio frequency) coverage analysis help prevent in wireless networks?

Dead zones and unauthorized access points

WEP encryption failures

DHCP server conflicts

DNS poisoning attacks

18. Which of the following is a key component of a WIPS architecture?

Distributed sensors collecting wireless traffic

Central management console for threat analysis

Real-time alert generation and response

All of the above

19. What type of attack involves creating a fake wireless network with a legitimate SSID?

Evil twin attack

De-authentication attack

KRACK attack

Bluetooth hijacking

20. Which detection method identifies rogue access points by analyzing signal strength and location?

Passive scanning

Triangulation and RF fingerprinting

MAC address filtering

WPA2 encryption verification