Skip to main content

CWSP-208 Real Exam Questions

Certified Wireless Security Professional (CWSP)

152 questions available · Page 1 of 16

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

You are advising on security for a public guest WLAN that must remain open for simple user onboarding while still protecting user traffic from passive eavesdropping.

What technology is specifically designed for this purpose?

  1. A

    OWE

  2. B

    WEP

  3. C

    LEAP

  4. D

    MAC filtering

Show answer and explanation

Correct answer: A

Question 2 Single choice

Given: An enterprise is using WPA2-Enterprise with 802.1X and a RADIUS server. After successful EAP authentication, the client still cannot pass normal user data.

What process must complete before the controlled port is opened for general traffic?

  1. A

    DHCP lease renewal

  2. B

    4-Way Handshake

  3. C

    DNS resolution

  4. D

    Captive portal acceptance

Show answer and explanation

Correct answer: B

Question 3 Single choice

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections. XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices.
With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

  1. A

    All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.

  2. B

    A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.

  3. C

    When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.

  4. D

    If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP.

Show answer and explanation

Correct answer: C

Question 4 Multiple choice

A security administrator is reviewing an older WLAN deployment and must identify deprecated security solutions that should be removed from production use.

Which technologies are deprecated? (Choose 3)

  1. A

    TKIP

  2. B

    CCMP

  3. C

    WEP

  4. D

    RC4

  5. E

    OWE

Show answer and explanation

Correct answers: A, C, D

Question 5 Single choice

Given: Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a
dedicated server named SRV21.
One example client is a MacBook Pro with 8 GB RAM.

What device functions as the 802.1X/EAP Authenticator?

  1. A

    SRV21

  2. B

    WLAN Controller/AP

  3. C

    MacBook Pro

  4. D

    RADIUS server

Show answer and explanation

Correct answer: B

Question 6 Multiple choice

A WLAN is implemented using WPA-Personal and MAC filtering.
To what common wireless network attacks is this network potentially vulnerable? (Choose 3)

  1. A

    Offline dictionary attacks

  2. B

    MAC Spoofing

  3. C

    ASLEAP

  4. D

    DoS

Show answer and explanation

Correct answers: A, B, D

Question 7 Single choice

Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11.

What kind of troubleshooting are you likely performing with such a tool?

  1. A

    Wireless adapter failure analysis.

  2. B

    Interference source location.

  3. C

    Fast secure roaming problems.

  4. D

    Narrowband DoS attack detection.

Show answer and explanation

Correct answer: C

Question 8 Single choice

When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

  1. A

    X.509 certificates

  2. B

    User credentials

  3. C

    Server credentials

  4. D

    RADIUS shared secret

Show answer and explanation

Correct answer: B

Question 9 Single choice

You work as the security administrator for your organization. In relation to the WLAN, you are viewing a dashboard that shows security threat, policy compliance and rogue threat charts.

What type of system is in view?

  1. A

    Wireshark Protocol Analyzer

  2. B

    Wireless VPN Management Systems

  3. C

    Wireless Intrusion Prevention System

  4. D

    Distributed RF Spectrum Analyzer

  5. E

    WLAN Emulation System

Show answer and explanation

Correct answer: C

Question 10 Single choice

What information can be used by a WIPS to triangulate the position of a rogue device?

  1. A

    RSSI values from multiple sensors

  2. B

    Beacon interval timing

  3. C

    VLAN tag assignments

  4. D

    MAC OUI prefix

Show answer and explanation

Correct answer: A