CWNP CWSP-207 Online Practice Questions and Exam Preparation

CWNP CWSP-207 Online Questions & Answers

• Question 11:

  Given: ABC Corporation’s 802.11 WLAN is comprised of a redundant WLAN controller pair (N+1) and 30 access points implemented in 2004. ABC implemented WEP encryption with IPSec VPN technology to secure their wireless

  communication because it was the strongest security solution available at the time it was implemented. IT management has decided to upgrade the WLAN infrastructure and implement Voice over Wi-Fi and is concerned with security because

  most Voice over Wi-Fi phones do not support IPSec.

  As the wireless network administrator, what new security solution would be best for protecting ABC’s data?

  A. Migrate corporate data clients to WPA-Enterprise and segment Voice over Wi-Fi phones by assigning them to a different frequency band.
  B. Migrate corporate data and Voice over Wi-Fi devices to WPA2-Enterprise with fast secure roaming support, and segment Voice over Wi-Fi data on a separate VLAN.
  C. Migrate to a multi-factor security solution to replace IPSec; use WEP with MAC filtering, SSID hiding, stateful packet inspection, and VLAN segmentation.
  D. Migrate all 802.11 data devices to WPA-Personal, and implement a secure DHCP server to allocate addresses from a segmented subnet for the Voice over Wi-Fi phones.
  B. Migrate corporate data and Voice over Wi-Fi devices to WPA2-Enterprise with fast secure roaming support, and segment Voice over Wi-Fi data on a separate VLAN.

• Question 12:

  Given: WLAN protocol analyzers can read and record many wireless frame parameters. What parameter is needed to physically locate rogue APs with a protocol analyzer?

  A. SSID
  B. IP Address
  C. BSSID
  D. Signal strength
  E. RSN IE
  F. Noise floor
  D. Signal strength

• Question 13:

  Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States. 802.1X/EAP is ABC’s preferred security solution,

  where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources.

  What security best practices should be followed in this deployment scenario?

  A. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.
  B. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.
  C. RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.
  D. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.
  A. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.

• Question 14:

  A single AP is configured with three separate WLAN profiles, as follows:

  1.SSID: ABCData - BSSID: 00:11:22:00:1F:C3 - VLAN 10 - Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 3 current clients

  2.SSID: ABCVoice - BSSID: 00:11:22:00:1F:C4 - VLAN 60 - Security: WPA2-Personal with AES-CCMP - 2 current clients

  3.SSID: Guest - BSSID: 00:11:22:00:1F:C5 - VLAN 90 - Security: Open with captive portal authentication - 3 current clients

  Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.

  How many unique GTKs and PTKs are currently in place in this scenario?

  A. 1 GTK - 8 PTKs
  B. 2 GTKs - 5 PTKs
  C. 2 GTKs - 8 PTKs
  D. 3 GTKs - 8 PTKs
  B. 2 GTKs - 5 PTKs

• Question 15:

  Wireless Intrusion Prevention Systems (WIPS) are used for what purposes? (Choose 3)

  A. Performance monitoring and troubleshooting
  B. Enforcing wireless network security policy
  C. Detecting and defending against eavesdropping attacks
  D. Security monitoring and notification
  E. Preventing physical carrier sense attacks
  F. Classifying wired client devices
  A. Performance monitoring and troubleshooting
  B. Enforcing wireless network security policy
  D. Security monitoring and notification

• Question 16:

  What WLAN client device behavior is exploited by an attacker during a hijacking attack?

  A. When the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.
  B. When the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.
  C. After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.
  D. As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.
  E. Client drivers scan for and connect to access points in the 2.4 GHz band before scanning the 5 GHz band.
  A. When the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.

• Question 17:

  ABC Company requires the ability to identify and quickly locate rogue devices. ABC has chosen an overlay WIPS solution with sensors that use dipole antennas to perform this task. Use your knowledge of location tracking techniques to

  answer the question.

  In what ways can this 802.11-based WIPS platform determine the location of rogue laptops or APs? (Choose 3)

  A. Time Difference of Arrival (TDoA)
  B. Angle of Arrival (AoA)
  C. Trilateration of RSSI measurements
  D. GPS Positioning
  E. RF Fingerprinting
  A. Time Difference of Arrival (TDoA)
  C. Trilateration of RSSI measurements
  E. RF Fingerprinting

• Question 18:

  Given: During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?

  A. The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
  B. The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.
  C. 4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.
  D. The username can be looked up in a dictionary file that lists common username/password combinations.
  B. The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

• Question 19:

  Given: Your organization is using EAP as an authentication framework with a specific type that meets the requirements of your corporate policies. Which one of the following statements is true related to this implementation?

  A. The client will be the authenticator in this scenario.
  B. The client STAs must use a different, but complementary, EAP type than the AP STAs.
  C. The client STAs may communicate over the uncontrolled port in order to authenticate as soon as Open System authentication completes.
  D. The client STAs may communicate over the controlled port in order to authenticate as soon as the Open System authentication completes.
  C. The client STAs may communicate over the uncontrolled port in order to authenticate as soon as Open System authentication completes.

• Question 20:

  Given: Your network includes a controller-based WLAN architecture with centralized data forwarding. The AP builds an encrypted tunnel to the WLAN controller. The WLAN controller is uplinked to the network via a trunked 1 Gbps Ethernet

  port supporting all necessary VLANs for management, control, and client traffic.

  What processes can be used to force an authenticated WLAN client's data traffic into a specific VLAN as it exits the WLAN controller interface onto the wired uplink? (Choose 3)

  A. On the Ethernet switch that connects to the AP, configure the switch port as an access port (not trunking) in the VLAN of supported clients.
  B. During 802.1X authentication, RADIUS sends a return list attribute to the WLAN controller assigning the user and all traffic to a specific VLAN.
  C. In the WLAN controller’s local user database, create a static username-to-VLAN mapping on the WLAN controller to direct data traffic from a specific user to a designated VLAN.
  D. Configure the WLAN controller with static SSID-to-VLAN mappings; the user will be assigned to a VLAN according to the SSID being used.
  B. During 802.1X authentication, RADIUS sends a return list attribute to the WLAN controller assigning the user and all traffic to a specific VLAN.
  C. In the WLAN controller’s local user database, create a static username-to-VLAN mapping on the WLAN controller to direct data traffic from a specific user to a designated VLAN.
  D. Configure the WLAN controller with static SSID-to-VLAN mappings; the user will be assigned to a VLAN according to the SSID being used.