What policy would help mitigate the impact of peer-to-peer attacks against wireless-enabled corporate laptop computers when the laptops are also used on public access networks such as wireless hot-spots?

• A. Require VPN software for connectivity to the corporate network.
• B. Require WPA2-Enterprise as the minimal WLAN security solution.
• C. Require secure applications such as POP, HTTP, and SSH.
• D. Require Port Address Translation (PAT) on each laptop.

Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States. 802.1X/EAP is ABC's preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources.
What security best practices should be followed in this deployment scenario?

• A. RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.
• B. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.
• C. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.
• D. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

What field in the RSN information element (IE) will indicate whether PSK- or Enterprise-based WPA or WPA2 is in use?

• A. Group Cipher Suite
• B. AKM Suite List
• C. RSN Capabilities
• D. Pairwise Cipher Suite List

Given: WLAN attacks are typically conducted by hackers to exploit a specific vulnerability within a network.
What statement correctly pairs the type of WLAN attack with the exploited vulnerability? (Choose 3)

• A. Social engineering attacks are performed to collect sensitive information from unsuspecting users
• B. Zero-day attacks are always authentication or encryption cracking attacks.
• C. Management interface exploit attacks are attacks that use social engineering to gain credentials from managers.
• D. Association flood attacks are Layer 3 DoS attacks performed against authenticated client stations
• E. Hijacking attacks interrupt a user's legitimate connection and introduce a new connection with an evil twin AP.
• F. RF DoS attacks prevent successful wireless communication on a specific frequency or frequency range.

Given: You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution.
In this configuration, the wireless network is initially susceptible to what type of attacks? (Choose 2)

• A. Session hijacking
• B. Offline dictionary attacks
• C. Layer 3 peer-to-peer
• D. Encryption cracking
• E. Layer 1 DoS
• F. Application eavesdropping