CWSP Wireless Security Auditing Quiz

1. How can organizations mitigate the risk of client-side wireless vulnerabilities?

Disable all wireless networks

Implement endpoint protection and disable auto-connect features

Only use wired connections

Ignore client vulnerabilities

2. What should a wireless auditor prioritize when creating a remediation plan?

Address critical vulnerabilities first, then lower-risk issues

Fix cosmetic issues before security vulnerabilities

Ignore all findings and do nothing

Randomly select issues to remediate

3. Which wireless standard introduced Simultaneous Authentication of Equals (SAE)?

802.11n

WPA2

WPA3

WEP

4. What is the purpose of testing for open authentication on wireless networks?

To ensure all networks require some form of authentication

To verify that networks are completely open

To disable all authentication mechanisms

To increase network accessibility

5. How should a wireless security auditor document findings from a site survey?

Keep findings confidential without written documentation

Create detailed maps, charts, and reports for stakeholder review

Verbally explain findings only

Post findings publicly on the internet

6. What is the primary risk of using WEP encryption in modern networks?

It is too slow for modern devices

It can be cracked in minutes using publicly available tools

It requires too much processing power

It prevents legitimate users from connecting

7. In a wireless security audit, what is the significance of identifying the 802.11 standard in use?

It has no impact on security

It determines encryption capabilities and potential vulnerabilities

It only affects network speed

It is irrelevant to security assessments

8. What does the CWSP certification primarily validate?

Wireless network installation skills

Ability to conduct wireless security assessments and audits

Knowledge of wired network security only

Hardware repair and maintenance

9. Which of the following is a best practice for securing enterprise wireless networks?

Use WPA2-Enterprise with 802.1X authentication

Broadcast the SSID loudly

Use default credentials on all APs

Allow guest access without authentication

10. What is a key benefit of using a wireless intrusion detection system (WIDS)?

Monitors for unauthorized APs and suspicious activity in real-time

Increases wireless network speed

Eliminates the need for encryption

Reduces the cost of wireless equipment

11. What is the primary objective of a wireless site survey?

Document RF coverage, capacity, and interference sources

Install access points in random locations

Count the total number of wireless users

Determine the cost of wireless equipment

12. What does RF (radio frequency) site survey documentation typically include?

Coverage maps, AP locations, and interference analysis

Only the number of users on the network

Billing information for wireless services

Employee names and contact information

13. Which encryption standard is considered more secure than WPA2?

WEP

WPA

WPA3

Open authentication

14. What is the purpose of conducting a wireless vulnerability assessment?

To identify and document security weaknesses in the wireless network

To increase network bandwidth

To replace all wireless infrastructure

To reduce the number of access points

15. Which attack allows an attacker to intercept and modify wireless traffic?

Denial of service (DoS)

Man-in-the-middle (MITM)

Rainbow table attack

Packet flooding

16. What is the primary advantage of conducting a rogue access point (AP) test?

Measure signal strength across the facility

Identify areas susceptible to unauthorized AP placement

Upgrade all legacy wireless equipment

Eliminate all wireless networks

17. Which of the following represents a vulnerability in WPA2-PSK deployments?

The pre-shared key can be brute-forced if weak

WPA2 encryption is inherently broken

All clients must use unique passwords

802.1X authentication is mandatory

18. In WPA2-Enterprise, what authentication method is most commonly used?

Pre-shared key (PSK)

802.1X with EAP

WEP shared key

No authentication required

19. What does SSID broadcast concealment primarily protect against?

Unauthorized access by skilled attackers

Casual or accidental network discovery

Man-in-the-middle attacks

Brute force password attacks

20. Which tool is commonly used to conduct passive wireless site surveys?

Aircrack-ng

Spectrum analyzer

Nmap

Wireshark packet capture on a wired connection