CWNP CWSP-207 Online Practice Questions and Exam Preparation

CWNP CWSP-207 Online Questions & Answers

• Question 1:

  ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAPMSCHAPv2 is the only supported authentication mechanism.

  As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

  A. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.
  B. The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next.
  C. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.
  D. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.
  D. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.

• Question 2:

  What preventative measures are performed by a WIPS against intrusions?

  A. EAPoL Reject frame flood against a rogue AP
  B. Evil twin attack against a rogue AP
  C. Deauthentication attack against a classified neighbor AP
  D. ASLEAP attack against a rogue AP
  E. Uses SNMP to disable the switch port to which rogue APs connect
  E. Uses SNMP to disable the switch port to which rogue APs connect

• Question 3:

  You work as the security administrator for your organization. In relation to the WLAN, you are viewing a dashboard that shows security threat, policy compliance and rogue threat charts. What type of system is in view?

  A. Wireshark Protocol Analyzer
  B. Wireless VPN Management Systems
  C. Wireless Intrusion Prevention System
  D. Distributed RF Spectrum Analyzer
  E. WLAN Emulation System
  C. Wireless Intrusion Prevention System

• Question 4:

  In an effort to optimize WLAN performance, ABC Company has upgraded their WLAN infrastructure from 802.11a/g to 802.11n. 802.11a/g clients are still supported and are used throughout ABC’s facility. ABC has always been highly security

  conscious, but due to budget limitations, they have not yet updated their overlay WIPS solution to 802.11n or 802.11ac.

  Given ABC’s deployment strategy, what security risks would not be detected by the 802.11a/g WIPS?

  A. Hijacking attack performed by using a rogue 802.11n AP against an 802.11a client
  B. Rogue AP operating in Greenfield 40 MHz-only mode
  C. 802.11a STA performing a deauthentication attack against 802.11n APs
  D. 802.11n client spoofing the MAC address of an authorized 802.11n client
  B. Rogue AP operating in Greenfield 40 MHz-only mode

• Question 5:

  What security vulnerabilities may result from a lack of staging, change management, and installation procedures for WLAN infrastructure equipment? (Choose 2)

  A. The WLAN system may be open to RF Denial-of-Service attacks
  B. WIPS may not classify authorized, rogue, and neighbor APs accurately
  C. Authentication cracking of 64-bit Hex WPA-Personal PSK
  D. Management interface exploits due to the use of default usernames and passwords for AP management
  E. AES-CCMP encryption keys may be decrypted
  B. WIPS may not classify authorized, rogue, and neighbor APs accurately
  D. Management interface exploits due to the use of default usernames and passwords for AP management

• Question 6:

  Joe’s new laptop is experiencing difficulty connecting to ABC Company’s 802.11 WLAN using 802.1X/EAP PEAPv0. The company’s wireless network administrator assured Joe that his laptop was authorized in the WIPS management

  console for connectivity to ABC’s network before it was given to him. The WIPS termination policy includes alarms for rogue stations, roque APs, DoS attacks and unauthorized roaming.

  What is a likely reason that Joe cannot connect to the network?

  A. Joe disabled his laptop’s integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.
  B. Joe’s integrated 802.11 radio is sending multiple Probe Request frames on each channel.
  C. An ASLEAP attack has been detected on APs to which Joe’s laptop was trying to associate. The WIPS responded by disabling the APs.
  D. Joe configured his 802.11 radio card to transmit at 100 mW to increase his SNR. The WIPS is detecting this much output power as a DoS attack.
  A. Joe disabled his laptop’s integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.

• Question 7:

  You have been recently hired as the wireless network administrator for an organization spread across seven locations. They have deployed more than 100 APs, but they have not been managedin either an automated or manual process for more than 18 months. Given this length of time, what is one of the first things you should evaluate from a security perspective?

  A. The channel widths configured
  B. The channels in use
  C. The VLANs in use
  D. The firmware revision
  D. The firmware revision

• Question 8:

  Your organization required compliance reporting and forensics features in relation to the 802.11ac WLAN they have recently installed. These features are not built into the management system provided by the WLAN vendor. The existing

  WLAN is managed through a centralized management console provided by the AP vendor with distributed APs and multiple WLAN controllers configured through this console.

  What kind of system should be installed to provide the required compliance reporting and forensics features?

  A. WNMS
  B. WIPS overlay
  C. WIPS integrated
  D. Cloud management platform
  B. WIPS overlay

• Question 9:

  You must locate non-compliant 802.11 devices. Which one of the following tools will you use and why?

  A. A spectrum analyzer, because it can show the energy footprint of a device using WPA differently from a device using WPA2.
  B. A spectrum analyzer, because it can decode the PHY preamble of a non-compliant device.
  C. A protocol analyzer, because it can be used to view the spectrum energy of non-compliant 802.11 devices, which is always different from compliant devices.
  D. A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance
  D. A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance

• Question 10:

  Given: You are the WLAN administrator in your organization and you are required to monitor the network and ensure all active WLANs are providing RSNs. You have a laptop protocol analyzer configured. In what frame could you see the existence or non-existence of proper RSN configuration parameters for each BSS through the RSN IE?

  A. Probe request
  B. Beacon
  C. RTS
  D. CTS
  E. Data frames
  B. Beacon