CWNP CWSP-205 Online Practice Questions and Exam Preparation

CWNP CWSP-205 Online Questions & Answers

• Question 51:

  Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

  A. Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.
  B. Allow access to specific files and applications based on the user's WMM access category.
  C. Provide two or more user groups connected to the same SSID with different levels of network privileges.
  D. Allow simultaneous support for multiple EAP types on a single access point.
  C. Provide two or more user groups connected to the same SSID with different levels of network privileges.

• Question 52:

  When using the 802.1X/EAP framework for authentication in 802.11 WLANs, why is the 802.1X Controlled Port still blocked after the 802.1X/EAP framework has completed successfully?

  A. The 802.1X Controlled Port is always blocked, but the Uncontrolled Port opens after the EAP authentication process completes.
  B. The 802.1X Controlled Port remains blocked until an IP address is requested and accepted by the Supplicant.
  C. The 4-Way Handshake must be performed before the 802.1X Controlled Port changes to the unblocked state.
  D. The 802.1X Controlled Port is blocked until Vender Specific Attributes (VSAs) are exchanged inside a RADIUS packet between the Authenticator and Authentication Server.
  C. The 4-Way Handshake must be performed before the 802.1X Controlled Port changes to the unblocked state.

• Question 53:

  Given: John Smith uses a coffee shop's Internet hot-spot (no authentication or encryption) to transfer funds between his checking and savings accounts at his bank's website. The bank's website uses the HTTPS protocol to protect sensitive account information. While John was using the hot-spot, a hacker was able to obtain John's bank account user ID and password and exploit this information.

  What likely scenario could have allowed the hacker to obtain John's bank account user ID and password?

  A. John's bank is using an expired X.509 certificate on their web server. The certificate is on John's Certificate Revocation List (CRL), causing the user ID and password to be sent unencrypted.
  B. John uses the same username and password for banking that he does for email. John used a POP3 email client at the wireless hot-spot to check his email, and the user ID and password were not encrypted.
  C. John accessed his corporate network with his IPSec VPN software at the wireless hot-spot. An IPSec VPN only encrypts data, so the user ID and password were sent in clear text. John uses the same username and password for banking that he does for his IPSec VPN software.
  D. The bank's web server is using an X.509 certificate that is not signed by a root CA, causing the user ID and password to be sent unencrypted.
  E. Before connecting to the bank's website, John's association to the AP was hijacked. The attacker intercepted the HTTPS public encryption key from the bank's web server and has decrypted John's login credentials in near real-time.
  B. John uses the same username and password for banking that he does for email. John used a POP3 email client at the wireless hot-spot to check his email, and the user ID and password were not encrypted.

• Question 54:

  Given: AAA is an architectural framework used to provide three separate security components in a network. Listed below are three phrases that each describe one aspect of the AAA framework. Option-1 -- This AAA function is performed first and validates user identify prior to determining the network resources to which they will be granted access. Option-2 -- This function is used for monitoring and auditing purposes and includes the collection of data that identifies what a user has done while connected. Option-3 -- This function is used to designate permissions to a particular user.

  What answer correctly pairs the AAA component with the descriptions provided above?

  A. Option-1 Access Control Option-2 Authorization Option-3 Accounting
  B. Option-1 Authentication Option-2 Accounting Option-3 Association
  C. Option-1 Authorization Option-2 Access Control Option-3 Association
  D. Option-1 Authentication Option-2 Accounting Option-3 Authorization
  D. Option-1 Authentication Option-2 Accounting Option-3 Authorization

• Question 55:

  Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11. What kind of troubleshooting are you likely performing with such a tool?

  A. Wireless adapter failure analysis.
  B. Interference source location.
  C. Fast secure roaming problems.
  D. Narrowband DoS attack detection.
  C. Fast secure roaming problems.

• Question 56:

  Given: A large enterprise is designing a secure, scalable, and manageable 802.11n WLAN that will support thousands of users. The enterprise will support both 802.1X/EAP-TTLS and PEAPv0/MSCHAPv2. Currently, the company is upgrading network servers as well and will replace their existing Microsoft IAS implementation with Microsoft NPS, querying Active Directory for user authentication.

  For this organization, as they update their WLAN infrastructure, what WLAN controller feature will likely be least valuable?

  A. WPA2-Enterprise authentication/encryption
  B. Internal RADIUS server
  C. WIPS support and integration
  D. 802.1Q VLAN trunking
  E. SNMPv3 support
  B. Internal RADIUS server

• Question 57:

  The IEEE 802.11 Pairwise Transient Key (PTK) is derived from what cryptographic element?

  A. Phase Shift Key (PSK)
  B. Group Master Key (GMK)
  C. Pairwise Master Key (PMK)
  D. Group Temporal Key (GTK)
  E. PeerKey (PK)
  F. Key Confirmation Key (KCK)
  C. Pairwise Master Key (PMK)

• Question 58:

  You are implementing an 802.11ac WLAN and a WIPS at the same time. You must choose between integrated and overlay WIPS solutions. Which of the following statements is true regarding integrated WIPS solutions?

  A. Integrated WIPS always perform better from a client throughput perspective because the same radio that performs the threat scanning also services the clients.
  B. Integrated WIPS use special sensors installed alongside the APs to scan for threats.
  C. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.
  D. Integrated WIPS is always more expensive than overlay WIPS.
  C. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.

• Question 59:

  ABC Company requires the ability to identify and quickly locate rogue devices. ABC has chosen an overlay WIPS solution with sensors that use dipole antennas to perform this task. Use your knowledge of location tracking techniques to answer the question.

  In what ways can this 802.11-based WIPS platform determine the location of rogue laptops or APs? (Choose 3)

  A. Time Difference of Arrival (TDoA)
  B. Angle of Arrival (AoA)
  C. Trilateration of RSSI measurements
  D. GPS Positioning
  E. RF Fingerprinting
  A. Time Difference of Arrival (TDoA)
  C. Trilateration of RSSI measurements
  E. RF Fingerprinting

• Question 60:

  Given: The ABC Corporation currently utilizes an enterprise Public Key Infrastructure (PKI) to allow employees to securely access network resources with smart cards. The new wireless network will use WPA2-Enterprise as its primary authentication solution. You have been asked to recommend a Wi-Fi Alliance-tested EAP method.

  What solutions will require the least change in how users are currently authenticated and still integrate with their existing PKI?

  A. EAP-FAST
  B. EAP-TLS
  C. PEAPv0/EAP-MSCHAPv2
  D. LEAP
  E. PEAPv0/EAP-TLS
  F. EAP-TTLS/MSCHAPv2
  B. EAP-TLS