A security analyst finds a rogue device during a monthly audit of current endpoint assets that are connected to the network. The corporate network utilizes 002.1X for access control. To be allowed on the network, a device must have a Known hardware address, and a valid user name and password must be entered in a captive portal. The following is the audit report:
Which of the following is the most likely way a rogue device was allowed to connect?

Question

A security analyst finds a rogue device during a monthly audit of current endpoint assets that are connected to the network. The corporate network utilizes 002.1X for access control. To be allowed on the network, a device must have a Known hardware address, and a valid user name and password must be entered in a captive portal. The following is the audit report:

Which of the following is the most likely way a rogue device was allowed to connect?

Neha Kumari · Accepted Answer

A user performed a MAC cloning attack with a personal device.

Neha Kumari · Answer

A DMCP failure caused an incorrect IP address to be distributed

Neha Kumari · Answer

An administrator bypassed the security controls for testing.

Neha Kumari · Answer

DNS hijacking let an attacker intercept the captive portal traffic.

Question list

List of questions

Question 1

(5)

Question 2

(5)

Question 3

(3)

Question 4

(3)

Question 5

(5)

Question 6

(4)

Question 7

(1)

Question 8

(4)

Question 9

(4)

Question 10

(4)

Related questions

Question 293 - SY0-701 discussion

Suggested answer: A

0 comments