CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 1:

  Given: You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution.

  In this configuration, the wireless network is initially susceptible to what type of attacks? (Choose 2)

  A. Encryption cracking
  B. Offline dictionary attacks
  C. Layer 3 peer-to-peer
  D. Application eavesdropping
  E. Session hijacking
  F. Layer 1 DoS
  B. Offline dictionary attacks
  F. Layer 1 DoS

• Question 2:

  What WLAN client device behavior is exploited by an attacker during a hijacking attack?

  A. When the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.
  B. When the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.
  C. After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.
  D. As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.
  E. Client drivers scan for and connect to access points in the 2.4 GHz band before scanning the 5 GHz band.
  A. When the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.

• Question 3:

  Which EAP method supports password authentication without requiring a server-side certificate?

  A. EAP-TTLS/MSCHAPv2
  B. EAP-TLS
  C. EAP-FAST
  D. PEAPv1/EAP-GTC
  C. EAP-FAST

• Question 4:

  In WPA2-Enterprise, which entity is responsible for verifying user credentials?

  A. Authenticator
  B. Supplicant
  C. Authentication Server
  D. Certificate Authority
  C. Authentication Server

• Question 5:

  Given: A large enterprise is designing a secure, scalable, and manageable 802.11n WLAN that will support thousands of users. The enterprise will support both 802.1X/EAP-TTLS and PEAPv0/MSCHAPv2. Currently, the company is upgrading network servers as well and willreplace their existing Microsoft IAS implementation with Microsoft NPS, querying Active Directory for user authentication.

  For this organization, as they update their WLAN infrastructure, what WLAN controller feature will likely be least valuable?

  A. WPA2-Enterprise authentication/encryption
  B. Internal RADIUS server
  C. WIPS support and integration
  D. 802.1Q VLAN trunking
  E. SNMPv3 support
  B. Internal RADIUS server

• Question 6:

  What security benefits are provided by endpoint security solution software? (Choose 3)

  A. Can prevent connections to networks with security settings that do not conform to company policy
  B. Can collect statistics about a user's network use and monitor network threats while they are connected
  C. Can restrict client connections to networks with specific SSIDs and encryption types
  D. Can be used to monitor for and prevent network attacks by nearby rogue clients or APs
  A. Can prevent connections to networks with security settings that do not conform to company policy
  B. Can collect statistics about a user's network use and monitor network threats while they are connected
  C. Can restrict client connections to networks with specific SSIDs and encryption types

• Question 7:

  Given: An enterprise is using WPA2-Enterprise with 802.1X and a RADIUS server. After successful EAP authentication, the client still cannot pass normal user data.

  What process must complete before the controlled port is opened for general traffic?

  A. DHCP lease renewal
  B. 4-Way Handshake
  C. DNS resolution
  D. Captive portal acceptance
  B. 4-Way Handshake

• Question 8:

  A company is deploying WPA3-Enterprise 192-Bit for a highly sensitive environment.

  What statement best describes this solution when compared with standard enterprise WLAN security?

  A. It removes the need for authentication servers
  B. It is a deprecated transition technology
  C. It is selected for stronger cryptographic protection
  D. It is used only for open guest access
  C. It is selected for stronger cryptographic protection

• Question 9:

  What security vulnerabilities may result from a lack of staging, change management, and installation procedures for WLAN infrastructure equipment? (Choose 2)

  A. The WLAN system may be open to RF Denial-of-Service attacks
  B. WIPS may not classify authorized, rogue, and neighbor APs accurately
  C. Authentication cracking of 64-bit Hex WPA-Personal PSK
  D. Management interface exploits due to the use of default usernames and passwords for AP management
  E. AES-CCMP encryption keys may be decrypted
  B. WIPS may not classify authorized, rogue, and neighbor APs accurately
  D. Management interface exploits due to the use of default usernames and passwords for AP management

• Question 10:

  Which condition must be met before a Pairwise Transient Key (PTK) can be derived?

  A. 802.11 association must be complete
  B. DHCP lease must be acquired
  C. EAPOL-Key frames must be encrypted
  D. The GTK must be installed first
  A. 802.11 association must be complete