CWNP CWSP-207 Online Practice Questions and Exam Preparation

CWNP CWSP-207 Online Questions & Answers

• Question 111:

  Which condition must be met before a Pairwise Transient Key (PTK) can be derived?

  A. 802.11 association must be complete
  B. DHCP lease must be acquired
  C. EAPOL-Key frames must be encrypted
  D. The GTK must be installed first
  A. 802.11 association must be complete

• Question 112:

  Which cryptographic suite is mandatory for Robust Security Networks (RSN)?

  A. TKIP
  B. RC4
  C. CCMP
  D. LEAP
  C. CCMP

• Question 113:

  A wireless analyst detects a high volume of disassociation frames from one AP MAC address. What is the most probable explanation?

  A. Rogue AP broadcasting fake disassociation frames
  B. Normal client handoff
  C. TKIP replay protection in action
  D. WPA3 PMF enforcement
  A. Rogue AP broadcasting fake disassociation frames

• Question 114:

  As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support

  passphrase/PSK-based security methods.

  When writing the 802.11 security policy, what password-related items should be addressed?

  A. MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.
  B. Password complexity should be maximized so that weak WEP IV attacks are prevented.
  C. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.
  D. Certificates should always be recommended instead of passwords for 802.11 client authentication.
  E. EAP-TLS must be implemented in such scenarios.
  C. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.

• Question 115:

  Given: A large enterprise is designing a secure, scalable, and manageable 802.11n WLAN that will support thousands of users. The enterprise will support both 802.1X/EAP-TTLS and PEAPv0/MSCHAPv2. Currently, the company is

  upgrading network servers as well and willreplace their existing Microsoft IAS implementation with Microsoft NPS, querying Active Directory for user authentication.

  For this organization, as they update their WLAN infrastructure, what WLAN controller feature will likely be least valuable?

  A. WPA2-Enterprise authentication/encryption
  B. Internal RADIUS server
  C. WIPS support and integration
  D. 802.1Q VLAN trunking
  E. SNMPv3 support
  B. Internal RADIUS server

• Question 116:

  You must locate non-compliant 802.11 devices. Which one of the following tools will you use and why?

  A. A spectrum analyzer, because it can show the energy footprint of a device using WPA differently from a device using WPA2.
  B. A spectrum analyzer, because it can decode the PHY preamble of a non-compliant device.
  C. A protocol analyzer, because it can be used to view the spectrum energy of non-compliant 802.11 devices, which is always different from compliant devices.
  D. A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance
  D. A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance

• Question 117:

  Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN. Before creating the WLAN security policy, what should you ensure you possess?

  A. Awareness of the exact vendor devices being installed
  B. Management support for the process
  C. End-user training manuals for the policies to be created
  D. Security policy generation software
  B. Management support for the process

• Question 118:

  Which EAP method supports password authentication without requiring a server-side certificate?

  A. EAP-TTLS/MSCHAPv2
  B. EAP-TLS
  C. EAP-FAST
  D. PEAPv1/EAP-GTC
  C. EAP-FAST

• Question 119:

  What 802.11 WLAN security problem is directly addressed by mutual authentication?

  A. Wireless hijacking attacks
  B. Weak password policies
  C. MAC spoofing
  D. Disassociation attacks
  E. Offline dictionary attacks
  F. Weak Initialization Vectors
  A. Wireless hijacking attacks

• Question 120:

  You perform a protocol capture using Wireshark and a compatible 802.11 adapter in Linux. When viewing the capture, you see an auth req frame and an auth rsp frame. Then you see an assoc req frame and an assoc rsp frame. Shortly after, you see DHCP communications and then ISAKMP protocol packets. What security solution is represented?

  A. 802.1X/EAP-TTLS
  B. Open 802.11 authentication with IPSec
  C. 802.1X/PEAPv0/MS-CHAPv2
  D. WPA2-Personal with AES-CCMP
  E. EAP-MD5
  B. Open 802.11 authentication with IPSec