Exam CAS-003 All Questions

View all questions & answers for the CAS-003 exam

Exam CAS-003 topic 1 question 168 discussion

Actual exam question from CompTIA's CAS-003

Question #: 168
Topic #: 1

An administrator has noticed mobile devices from an adjacent company on the corporate wireless network. Malicious activity is being reported from those devices.
To add another layer of security in an enterprise environment, an administrator wants to add contextual authentication to allow users to access enterprise resources only while present in corporate buildings. Which of the following technologies would accomplish this?

A. Port security
B. Rogue device detection
C. Bluetooth
D. GPS

Show Suggested Answer

Suggested Answer: D 🗳️

by D1960 at Nov. 15, 2020, 7:41 p.m.

Comments

Submit Cancel

zapato

3 years, 4 months ago

The given answer is correct. Contextual authentication relies on Location, IP address, Device, Time

upvoted 2 times

...

americaman80

4 years, 1 month ago

Port Security is not generally used on mobile devices....The answer is D - GPS

upvoted 2 times

...

Trap_D0_r

4 years, 4 months ago

Regardless of the location of the "other company" this question is pretty specifically saying it wants to prevent War Driving. You must be physically present in the building to access the network. How would a network engineer tackle this? With radio spectrum audits and manipulating the power signal on APs so that the network boundary ends at the wall of the corporation. That's not an option here though, and the ONLY provided option to prevent people from the other side of the wall (or parking lot) from accessing the network would be some sort of GPS enforcement (though I'm not entirely sure what it would looks like).

upvoted 2 times

D1960

3 years, 11 months ago

If you want to prevent War Driving, why not: B. Rogue device detection ? That would stop unauthorized devices, no matter where those devices were located.

upvoted 2 times

...

D1960

4 years, 3 months ago

I don't think there is any geofencing that can abruptly stop at a wall, roof, or floor. The question specifically mentions the other company is adjacent. I suspect that is mentioned for a reason. Port security is available for wireless, however that could be vulnerable to a Karma attack (now known as Karmetasploit). Reference: What is Rogue device detection & prevention? https://www.manageengine.com/products/oputils/rogue-detection-and-prevention.html

upvoted 1 times

Trap_D0_r

4 years, 3 months ago

You can 100% configure the RF power on your WAPs to completely end at a wall, door, floor, or ceiling if you know what you're doing. You have to be able to do an RF Spectrum audit, which involves special hardware and a knowledge of how radio waves move through the air, and be willing to pay the extra expense to place them in sometimes more-difficult-to-place areas of the building. Metal shielding in the walls is also extremely effective at stopping all RF signals.

upvoted 1 times

D1960

4 years ago

But that is way beyond a GPS.

upvoted 1 times

...

D1960

3 years, 11 months ago

What you are describing is way beyond a GPS. A GPS is only accurate to about 16 feet. "For example, GPS-enabled smartphones are typically accurate to within a 4.9 m (16 ft.) radius under open sky. However, their accuracy worsens near buildings, bridges, and trees. " https://www.gps.gov/systems/gps/performance/accurac What is Rogue device detection & prevention? https://www.manageengine.com/products/oputils/rogue-detection-and-prevention.html

upvoted 1 times

...

D1960

4 years, 7 months ago

Maybe: Port Security? Seems to me that port security is usually used by wired networks. Usually this is a feature of wired switches, not wireless routers. Maybe I am wrong about that? Seems to me that, GPS or Bluetooth, would not be helpful here.

upvoted 1 times

...

D1960

4 years, 7 months ago

Maybe: Rogue device detection? By itself, a GPS would not do anything to provide security. In fact a GPS might not be useful at all, in this situation. What if the "adjacent company" is right above/below on another floor? It would make much more sense to not allow any unauthorized device to access the corporate network.

upvoted 4 times

...