NETESS 2.0 MODULE 16 QUIZ - Wireless Security Measures

Which of the following security measures will prevent wireless clients from seeing that your WLAN is available?

• MAC address filtering

• disabling SSID broadcast

• implementing port forwarding

• configuring authentication

Answer explanation

1. Disabling SSID broadcasts will prevent wireless clients from seeing that your WLAN is available.

Which of the following security measures will require users to enter a password to access your WLAN?

• MAC address filtering

• disabling SSID broadcast

• implementing port forwarding

• configuring authentication

Answer explanation

1. Configure authentication to quire users to enter a password to access your WLAN.

Which of the following security measures will permit or prevent a specific device from accessing your WLAN?

• MAC address filtering

• disabling SSID broadcast

• implementing port forwarding

• configuring authentication

Answer explanation

1. MAC address filtering can be configured to permit or prevent a specific device from accessing your WLAN.

Which of the following security measures will send specified traffic to a DMZ server?

• MAC address filtering

• disabling SSID broadcast

• implementing port forwarding

• configuring authentication

Answer explanation

1. Implement port forwarding to end specified traffic to a DMZ server.

What type of authentication do most access points use by default?

• WEP

• open

• PSK

• EAP

Answer explanation

Topic 16.1.0 - The three types of wireless authentication methods are open authentication, PSK, and EAP. The most common default authentication method is open authentication.

What is the purpose of a DMZ?

• It provides secure connectivity for clients that connect to the internal network through a wireless LAN.

• It analyzes traffic for intrusion attempts and sends reports to management stations.

• It creates an encrypted and authenticated tunnel for remote hosts to access the internal network.

• It allows external hosts to access specific company servers while maintaining the security restrictions for the internal network.

Answer explanation

Topic 16.3.0 - The DMZ is an area of the network that is accessible to both internal and external users. It is more secure than the external network but not as secure as the internal network. It allows external hosts to access internal servers.

Which two actions improve security on a wireless network? (Choose two.)

• Enable WEP

• Keep the default administrator password for the access point

• Broadcast the default SSID

• Enable MAC filtering

Answer explanation

Topic 16.1.0 - MAC filtering allows an administrator to limit access to a wireless network and to control which devices, based on MAC address, can access the network. The Wired Equivalency Protocol (WEP) is a security feature that encrypts network traffic over the wireless network. WEP uses pre-configured keys to encrypt and decrypt data.

What is the term used to describe the area of a network which stores servers that are accessible to any users from the Internet?

• DMZ

• extranet

• demarcation point

• intranet

Answer explanation

Topic 16.3.0 - The DMZ refers to an area of the network that is accessible to both internal and external users. It is more secure than the external network but not as secure as the internal network.

What is a feature that can be used by an administrator to prevent unauthorized users from connecting to a wireless access point?

• MAC filtering

• proxy server

• WPA encryption

• software firewall

Answer explanation

Topic 16.1.0 - Limiting a certain set of MAC addresses to connect to an access point is a way to ensure that only those devices are allowed to use the wireless network. A software firewall is used to prevent other users from gaining access to the protected computer. Configuring WPA encryption does not guarantee that the unauthorized user will not find the way to connect to the network. A proxy server is mostly used to filter traffic based on content.

What is the purpose of a wireless SSID?

• to reliably receive and transmit data from wireless clients

• to securely transmit data between wireless clients

• to uniquely identify a wireless network

• to securely connect a wireless client to an access point

Answer explanation

Topic 16.3.0 - A Service Set Identifier (SSID) is a 32-byte field used to uniquely identify a wireless network. The SSID is configured on the access point or wireless router and is transmitted in packets and broadcasts by default.