CWNP CWSP-207 Online Practice Questions and Exam Preparation

CWNP CWSP-207 Online Questions & Answers

• Question 51:

  Given: A WLAN protocol analyzer trace reveals the following sequence of frames (excluding the ACK frames): 1) 802.11 Probe Req and 802.11 Probe Rsp 2) 802.11 Auth and then another 802.11 Auth 3) 802.11 Assoc Req and 802.11 Assoc Rsp 4) EAPOL-KEY 5) EAPOL-KEY 6) EAPOL-KEY 7) EAPOL-KEY What security mechanism is being used on the WLAN?

  A. WEP-128
  B. WPA2-Personal
  C. EAP-TLS
  D. WPA-Enterprise
  E. 802.1X/LEAP
  B. WPA2-Personal

• Question 52:

  Given: XYZ Company has recently installed a controller-based WLAN and is using a RADIUS server to query authentication requests to an LDAP server. XYZ maintains user-based access policies and would like to use the RADIUS server to

  facilitate network authorization.

  What RADIUS features could be used by XYZ to assign the proper network permissions to users during authentication? (Choose 2)

  A. The RADIUS server can communicate with the DHCP server to issue the appropriate IP address and VLAN assignment to users.
  B. The RADIUS server can support vendor-specific attributes in the ACCESS-ACCEPT response, which can be used for user policy assignment.
  C. RADIUS can reassign a client’s 802.11 association to a new SSID by referencing a username-to-SSID mapping table in the LDAP user database.
  D. RADIUS can send a DO-NOT-AUTHORIZE demand to the authenticator to prevent the STA from gaining access to specific files, but may only employ this in relation to Linux servers.
  E. RADIUS attributes can be used to assign permission levels, such as read-only permission, to users of a particular network resource.
  B. The RADIUS server can support vendor-specific attributes in the ACCESS-ACCEPT response, which can be used for user policy assignment.
  E. RADIUS attributes can be used to assign permission levels, such as read-only permission, to users of a particular network resource.

• Question 53:

  A WLAN is implemented using WPA-Personal and MAC filtering.

  To what common wireless network attacks is this network potentially vulnerable? (Choose 3)

  A. Offline dictionary attacks
  B. MAC Spoofing
  C. ASLEAP
  D. DoS
  A. Offline dictionary attacks
  B. MAC Spoofing
  D. DoS

• Question 54:

  What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

  A. Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.
  B. Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.
  C. Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.
  D. The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.
  B. Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

• Question 55:

  Given: ABC Company has recently installed a WLAN controller and configured it to support WPA2-Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing,

  Sales, and Engineering).

  How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

  A. The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.
  B. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.
  C. The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.
  D. The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.
  B. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

• Question 56:

  Given: ABC Company secures their network with WPA2-Personal authentication and AES-CCMP encryption. What part of the 802.11 frame is always protected from eavesdroppers by this type of security?

  A. All MSDU contents
  B. All MPDU contents
  C. All PPDU contents
  D. All PSDU contents
  A. All MSDU contents

• Question 57:

  What are the three roles of the 802.1X framework, as defined by the 802.1X standard, that are performed by the client STA, the AP (or WLAN controller), and the RADIUS server? (Choose 3)

  A. Enrollee
  B. Registrar
  C. AAA Server
  D. Authentication Server
  E. Supplicant
  F. Authenticator
  G. Control Point
  D. Authentication Server
  E. Supplicant
  F. Authenticator

• Question 58:

  You work as the security administrator for your organization. In relation to the WLAN, you are viewing a dashboard that shows security threat, policy compliance and rogue threat charts. What type of system is in view?

  A. Wireshark Protocol Analyzer
  B. Wireless VPN Management Systems
  C. Wireless Intrusion Prevention System
  D. Distributed RF Spectrum Analyzer
  E. WLAN Emulation System
  C. Wireless Intrusion Prevention System

• Question 59:

  Given: XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication. XYZ would like to support fast secure roaming for the

  phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming.

  What portable solution would be recommended for XYZ to troubleshoot roaming problems?

  A. WIPS sensor software installed on a laptop computer
  B. Spectrum analyzer software installed on a laptop computer
  C. An autonomous AP mounted on a mobile cart and configured to operate in monitor mode
  D. Laptop-based protocol analyzer with multiple 802.11n adapters
  D. Laptop-based protocol analyzer with multiple 802.11n adapters

• Question 60:

  In the IEEE 802.11-2012 standard, what is the purpose of the 802.1X Uncontrolled Port?

  A. To allow only authentication frames to flow between the Supplicant and Authentication Server
  B. To block authentication traffic until the 4-Way Handshake completes
  C. To pass general data traffic after the completion of 802.11 authentication and key management
  D. To block unencrypted user traffic after a 4-Way Handshake completes
  A. To allow only authentication frames to flow between the Supplicant and Authentication Server