Deck 10: Managing the Wireless Network

Question 1

All wireless network interface card adapters can act as a wireless device probe.

Answer 1

False

Question 2

Global positioning systems (GPS) are widely used in 802.11 WLANs.

Answer 2

False

Question 3

A ____ probe is a standard wireless device, such as a portable laptop computer, configured to act as a wireless probe.

A) desktop
B) access point
C) wireless device
D) dedicated

Answer 3

C

Question 4

Both SNMP and WLAN management systems contain tools to perform three important management functions: network discovery, ____, and configuration.

A) auditing
B) monitoring
C) logging
D) network association

Question 5

A spike in a network's bandwidth or a decrease in the time to respond to a request are signs that the network is running slowly. These events are known as a(n) ____.

A) AP trap
B) CDP trap
C) WLAN trap
D) SNMP trap

Question 6

In a WIPS, signatures, instead of being used for attack detection, are only used to provide additional details about the attack itself.

Question 7

____ is a diagnostic program that sends a packet to a device and waits for a response to determine if it is properly functioning.

A) MIB
B) SSH
C) SFTP
D) PING

Question 8

____ allows computers and network equipment to gather data about network performance.

A) SNMP
B) FTP
C) HTTP
D) L2TP

Question 9

A ____ has been labeled a "cat and mouse" game for trying to find rogue access points.

A) mobile sniffing audit
B) wireless probe
C) triangulation method
D) trilateration method

Question 10

If SNMP is being used, monitoring often focuses upon the performance of the network.

Question 11

____ uses intelligent algorithms to improve precision by accounting for the environmental effects on the wireless signal itself.

A) Triangulation
B) Trilateration
C) RSSI
D) RF fingerprinting

Question 12

The ____ Act covers corporate governance, financial disclosure, and the practice of public accounting.

A) Gramm-Leach-Bliley
B) Health Insurance Portability and Accountability
C) Sarbanes-Oxley
D) CAN-SPAM

Question 13

Monitoring the RF frequency requires a special sensor called a(n) ____.

A) AP fingerprinter
B) wireless probe
C) wireless triangulator
D) AP trilaterator

Question 14

____ can be used to measure the RF power loss between transmitter and receiver to calculate the distance from the transmitting device to the receiver.

A) RF fingerprinting
B) RSSI
C) Trilateration
D) Triangulation

Question 15

The nearest sensor method can locate a client to within a ____ meter area.

A) 600
B) 670
C) 900
D) 930

Question 16

A ____ constantly monitors the radio frequency (using wireless probes) for attacks.

A) wireless intrusion detection system (WIDS)
B) wireless AP detection system (WADS)
C) rogue AP prevention system (RAPS)
D) rogue AP detection system (RADS)

Question 17

A(n) ____ WIDS analyzes the information it gathers and compares it to large databases of attack signatures.

A) baseline detection
B) anomaly detection
C) behavior detection
D) signature detection

Question 18

A(n) ____ integrates several layers of protection to detect and prevent malicious attacks.

A) WLAN concentrator
B) AP concentrator
C) wireless intrusion prevention system (WIPS)
D) RF fingerprinter

Question 19

The ____ is a signal that tells the strength of the incoming (received) signal.

A) RSSI
B) HTTP
C) MIB
D) RFAP

Question 20

Wireless network bandwidth is less than that of a wired network.

Question 21

What is the key to wireless probes?

Question 22

WIPS detect categories of attacks using predictable or ____ techniques that may involve a combination of different approaches.

A) random
B) deterministic
C) unordered
D) unpredictable

Question 23

A(n) ____ probe uses dedicated probes for scanning the RF for attacks.

A) integrated
B) embedded
C) internal
D) overlay

Question 24

In a WIDS anomaly detection system the security administrator defines the ____ (or normal) state of the network's traffic.

A) baseline
B) signature
C) pattern
D) false positives

Question 25

A(n) ____ probe uses existing access points to monitor the RF.

A) superposed
B) overlay
C) integrated
D) external

Question 26

Briefly explain the benefits of using SNMP and WLAN management systems to configure APs.

Question 27

Why was important to monitor a wired network?

Question 28

A(n) ____ system monitors the normal activity of the wireless LAN and "learns" its normal characteristics.

A) signature detection
B) anomaly detection
C) known attacks detection
D) pattern detection

Question 29

What are the advantages and disadvantages of using SNMP for WLANs?

Question 30

How does the nearest sensor method work?

Question 31

A more proactive approach than intrusion detection is a(n) ____.

A) RF fingerprinting
B) trilateration system
C) RSSI system
D) intrusion prevention system (IPS)

Question 32

An SNMP ____________________ acknowledges the message with an SNMP response.

Question 33

Briefly describe how SNMP works.

Question 34

____________________ measures the angles between three or more nearby APs; where the measurements intersect this can be used to calculate the location of the device.

Question 35

The ____________________ governs the privacy of personal health information.

Question 36

A(n) ____________________ is a security management system that compiles information from a computer network or individual computer and then analyzes it to identify security vulnerabilities and attacks.

Question 37

What are the steps to perform a mobile sniffing audit?

Question 38

____________________ measures the distance between three or more APs rather than the angles between them.

Question 39

What is the problem with rogue access points?

Question 40

What are the disadvantages of using a WIDS?

Question 41

Compare an intrusion system with a firewall.