As noted in Tip #1, the wording of exam questions can be challenging in themselves. Here’s a paraphrase of one of my favourite examples:
Which of the following should be a concern to an IS auditor reviewing a wireless network?
A. Wi-Fi Protected Access (WPA) encryption is enabled.
B. SSID (Service Set IDentifier) broadcasting is enabled.
C. Anti-malware software is running on all wireless clients.
D. MAC (Media Access Control) access control filtering is used on all wireless access points.