CWNP CWSP-207 Online Practice Questions and Exam Preparation

CWNP CWSP-207 Online Questions & Answers

• Question 131:

  When using WPA3-Personal, what key establishment method replaces the traditional 4-way handshake?

  A. SAE (Simultaneous Authentication of Equals)
  B. EAP-TLS
  C. Opportunistic Key Caching
  D. Pre-Shared Key (PSK)
  A. SAE (Simultaneous Authentication of Equals)

• Question 132:

  What is the primary security goal of implementing PMF (Protected Management Frames)?

  A. Prevent unauthorized DHCP assignment
  B. Protect against disassociation and deauthentication attacks
  C. Encrypt all broadcast data frames
  D. Block rogue AP beaconing
  B. Protect against disassociation and deauthentication attacks

• Question 133:

  What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

  A. The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.
  B. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.
  C. The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.
  D. The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.
  B. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.

• Question 134:

  Given: WLAN attacks are typically conducted by hackers to exploit a specific vulnerability within a network. What statement correctly pairs the type of WLAN attack with the exploited vulnerability? (Choose 3)

  A. Management interface exploit attacks are attacks that use social engineering to gain credentials from managers.
  B. Zero-day attacks are always authentication or encryption cracking attacks.
  C. RF DoS attacks prevent successful wireless communication on a specific frequency or frequency range.
  D. Hijacking attacks interrupt a user’s legitimate connection and introduce a new connection with an evil twin AP.
  E. Social engineering attacks are performed to collect sensitive information from unsuspecting users
  F. Association flood attacks are Layer 3 DoS attacks performed against authenticated client stations
  C. RF DoS attacks prevent successful wireless communication on a specific frequency or frequency range.
  D. Hijacking attacks interrupt a user’s legitimate connection and introduce a new connection with an evil twin AP.
  E. Social engineering attacks are performed to collect sensitive information from unsuspecting users

• Question 135:

  Which IEEE 802.11 feature enables the protection of management frames from spoofing and replay attacks?

  A. RSN Capabilities
  B. Management Frame Protection (MFP)
  C. Protected Extensible Authentication Protocol
  D. Pairwise Master Key Caching
  B. Management Frame Protection (MFP)

• Question 136:

  ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAPMSCHAPv2 is the only supported authentication mechanism.

  As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

  A. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.
  B. The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next.
  C. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.
  D. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.
  D. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.

• Question 137:

  While performing a manual scan of your environment using a spectrum analyzer on a laptop computer, you notice a signal in the real time FFT view. The signal is characterized by having peak power centered on channel 11 with an

  approximate width of 20 MHz at its peak. The signal widens to approximately 40 MHz after it has weakened by about 30 dB.

  What kind of signal is displayed in the spectrum analyzer?

  A. A frequency hopping device is being used as a signal jammer in 5 GHz
  B. A low-power wideband RF attack is in progress in 2.4 GHz, causing significant 802.11 interference
  C. An 802.11g AP operating normally in 2.4 GHz
  D. An 802.11a AP operating normally in 5 GHz
  C. An 802.11g AP operating normally in 2.4 GHz

• Question 138:

  Given: ABC Company has 20 employees and only needs one access point to cover their entire facility. Ten of ABC Company’s employees have laptops with radio cards capable of only WPA security. The other ten employees have laptops

  with radio cards capable of WPA2 security. The network administrator wishes to secure all wireless communications (broadcast and unicast) for each laptop with its strongest supported security mechanism, but does not wish to implement a

  RADIUS/AAA server due to complexity.

  What security implementation will allow the network administrator to achieve this goal?

  A. Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect.
  B. Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect.
  C. Implement two separate SSIDs on the AP-one for WPA-Personal using TKIP and one for WPA2-Personal using AES-CCMP.
  D. Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCMP.
  C. Implement two separate SSIDs on the AP-one for WPA-Personal using TKIP and one for WPA2-Personal using AES-CCMP.

• Question 139:

  You are implementing an 802.11ac WLAN and a WIPS at the same time. You must choose between integrated and overlay WIPS solutions. Which of the following statements is true regarding integrated WIPS solutions?

  A. Integrated WIPS always perform better from a client throughput perspective because the same radio that performs the threat scanning also services the clients.
  B. Integrated WIPS use special sensors installed alongside the APs to scan for threats.
  C. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.
  D. Integrated WIPS is always more expensive than overlay WIPS.
  C. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.