GIAC GSNA Exam - Topic 3 Question 1 Discussion

Actual exam question for GIAC's GSNA exam

Question #: 1
Topic #: 3

[All GSNA Questions]

You work as a Network Administrator for McNeil Inc. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. The company's management has decided to provide laptops to its sales team members. These laptops are equipped with smart card readers. The laptops will be configured as wireless network clients. You are required to accomplish the following tasks:

The wireless network communication should be secured.

The laptop users should be able to use smart cards for getting authenticated.

In order to accomplish the tasks, you take the following steps:

Configure 802.1x and WEP for the wireless connections.

Configure the PEAP-MS-CHAP v2 protocol for authentication.

What will happen after you have taken these steps?

ABoth tasks will be accomplished.

BThe laptop users will be able to use smart cards for getting authenticated.

CThe wireless network communication will be secured.

DNone of the tasks will be accomplished.

Show Suggested Answer

Suggested Answer: C

As 802.1x and WEP are configured, this step will enable the secure wireless network communication. For authentication, you have configured

the PEAP-MS-CHAP v2 protocol. This protocol can be used for authentication on wireless networks, but it cannot use a public key infrastructure

(PKI). No certificate can be issued without a PKI. Smart cards cannot be used for authentication without certificates. Hence, the laptop users

will not be able to use smart cards for getting authenticated.

by Valentin at May 07, 2022, 09:30 PM

Limited Time Offer

25%

Off

Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Zachary

4 months ago

I'm surprised they still use WEP. Isn't that outdated?

upvoted 0 times

...

Nan

4 months ago

Wait, can 802.1x and WEP even work together? Seems off.

upvoted 0 times

...

Alverta

4 months ago

I disagree, C is the better answer. Security is key!

upvoted 0 times

...

Azzie

4 months ago

I think B is more accurate. Smart cards will definitely work.

upvoted 0 times

...

Arminda

5 months ago

Sounds like A is the right choice! Both tasks should work.

upvoted 0 times

...

Keneth

5 months ago

I believe that if the wireless network is secured properly, then the smart card authentication should work, but I’m not confident about the specifics of WEP.

upvoted 0 times

...

Celestina

5 months ago

I practiced a similar question where we had to secure a wireless network, and I feel like both tasks might not be fully accomplished with just those configurations.

upvoted 0 times

...

Sherill

5 months ago

I think configuring PEAP-MS-CHAP v2 should allow smart card authentication, but I’m a bit confused about how it interacts with the wireless security settings.

upvoted 0 times

...

Minna

5 months ago

I remember studying 802.1x for securing wireless networks, but I'm not entirely sure if WEP is strong enough for this scenario.

upvoted 0 times

...

Kiley

5 months ago

Okay, I've got this. The Cisco solution prevents the use of compromised accounts and social engineering, which is option A. And it automatically removes malicious emails from users' inboxes, which is option C. Those are the two correct answers.

upvoted 0 times

...

Vicky

5 months ago

This question seems straightforward, but I want to make sure I understand the key details before answering. The prompt mentions "extensive technical planning" is needed, so I'll need to carefully consider the options and how they relate to that.

upvoted 0 times

...

Vallie

5 months ago

Modifying the rate limit threshold of Rule1 doesn't seem like the right approach here. I think I'll go with option A and modify the conditions to target the specific IP addresses from each office.

upvoted 0 times

...

Elise

5 months ago

Wait, I'm confused. Are these like those intermediary bank accounts that aggregate transactions? I'm not totally clear on the terminology.

upvoted 0 times

...

Jodi

5 months ago

I think we need to set up a Network Discovery policy to get the host data into Cisco Firepower. That seems like a requirement for asset management.

upvoted 0 times

...