ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism. As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

• A. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.
• B. The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next.
• C. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.
• D. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.

Which of the following attacks involves sending a fake access point that mimics a legitimate network to trick clients into connecting to it?

• A. Man-in-the-Middle (MITM) attack
• B. Denial of Service (DoS) attack
• C. Replay attack
• D. Rogue access point attack

You received a help desk ticket reporting a user is not able to connect to an SSID on the wireless network. This SSID is configured to support WPA2-Personal/preshared key for security. After following the companies troubleshooting methodology you decide to perform protocol analysis near the user that is experiencing the problem. This includes configuring a filter on the analyzer to show the conversation between the client device and the access point to which the user is attempting to connect. You notice after the second EAPoL frame of the 4-way handshake there is a deauthentication frame and the process repeats. What is a reason for this type of behavior?

• A. The device is configured for EAP and the user entered the wrong username or password
• B. The user entered the wrong passphrase when connecting to the WLAN
• C. The access point is configured for the incorrect security type
• D. The device driver on the client device is corrupt and needs to be reinstalled

Given: Fred works primarily from home and public wireless hot-spots rather than commuting to the office. He frequently accesses the office network remotely from his Mac laptop using the local
802.11 WLAN. In this remote scenario, what single wireless security practice will provide the greatest security for Fred?

• A. Use secure protocols, such as FTP, for remote file transfers.
• B. Use WIPS sensor software on the laptop to monitor for risks and attacks
• C. Use enterprise WIPS on the corporate office network
• D. Use only HTTPS when agreeing to acceptable use terms on public networks
• E. Use an IPSec VPN for connectivity to the office network
• F. Use 802.1X/PEAPv0 to connect to the corporate office network from public hot-spots

Given: ABC Company secures their network with WPA2-Personal authentication and AES-CCMP encryption. What part of the 802.11 frame is always protected from eavesdroppers by this type of security?

• A. All PPDU contents
• B. All PSDU contents
• C. All MSDU contents
• D. All MPDU contents