CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 121:

  Given: Mary has just finished troubleshooting an 802.11g network performance problem using a laptop-based WLAN protocol analyzer. The wireless network implements 802.1X/PEAP and the client devices are authenticating properly. When Mary disables the WLAN protocol analyzer, configures her laptop for PEAP authentication, and then tries to connect to the wireless network, she is unsuccessful. Before using the WLAN protocol analyzer, Mary's laptop connected to the network without any problems.

  What statement indicates why Mary cannot access the network from her laptop computer?

  A. The nearby WIPS sensor categorized Mary's protocol analyzer adapter as a threat and is performing a deauthentication flood against her computer.
  B. The PEAP client's certificate was voided when the protocol analysis software assumed control of the wireless adapter.
  C. The protocol analyzer's network interface card (NIC) drivers are still loaded and do not support the version of PEAP being used.
  D. Mary's supplicant software is using PEAPv0/EAP-MSCHAPv2, and the access point is using PEAPv1/EAP-GTC.
  C. The protocol analyzer's network interface card (NIC) drivers are still loaded and do not support the version of PEAP being used.

• Question 122:

  Select the answer option that arranges the numbered events in the correct time sequence (first to last) for a client associating to a BSS using EAP-PEAPv0/MSCHAPv2.

  1. Installation of PTK

  2. Initiation of 4-way handshake

  3. Open system authentication

  4. 802.11 association

  5. 802.1X controlled port is opened for data traffic

  6. Client validates server certificate

  7. AS validates client credentials

  A. 3-4-6-7-2-1-5
  B. 4-3-5-2-7-6-1
  C. 5-3-4-2-6-7-1
  D. 6-1-3-4-2-7-5
  E. 4-3-2-7-6-1-5
  F. 3-4-7-6-5-2-1
  A. 3-4-6-7-2-1-5

• Question 123:

  A wireless analyst detects a high volume of disassociation frames from one AP MAC address.

  What is the most probable explanation?

  A. Rogue AP broadcasting fake disassociation frames
  B. Normal client handoff
  C. TKIP replay protection in action
  D. WPA3 PMF enforcement
  A. Rogue AP broadcasting fake disassociation frames

• Question 124:

  Which EAP type allows authentication using a server certificate while protecting user credentials inside a TLS tunnel?

  A. EAP-TLS
  B. EAP-TTLS
  C. PEAPv0/EAP-MSCHAPv2
  D. EAP-FAST
  C. PEAPv0/EAP-MSCHAPv2

• Question 125:

  What EAP type supports using MS-CHAPv2, EAP-GTC or EAP-TLS for wireless client authentication?

  A. H-REAP
  B. EAP-GTC
  C. EAP-TTLS
  D. PEAP
  E. LEAP
  D. PEAP

• Question 126:

  In the basic 4-way handshake used in secure 802.11 networks, what is the purpose of the ANonce and SNonce? (Choose 2)

  A. They are used to pad Message 1 and Message 2 so each frame contains the same number of bytes.
  B. The IEEE 802.11 standard requires that all encrypted frames contain a nonce to serve as a Message Integrity Check (MIC).
  C. They are added together and used as the GMK, from which the GTK is derived.
  D. They are input values used in the derivation of the Pairwise Transient Key.
  E. They allow the participating STAs to create dynamic keys while avoiding sending unicast encryption keys across the wireless medium.
  D. They are input values used in the derivation of the Pairwise Transient Key.
  E. They allow the participating STAs to create dynamic keys while avoiding sending unicast encryption keys across the wireless medium.

• Question 127:

  A security administrator is reviewing an older WLAN deployment and must identify deprecated security solutions that should be removed from production use.

  Which technologies are deprecated? (Choose 3)

  A. TKIP
  B. CCMP
  C. WEP
  D. RC4
  E. OWE
  A. TKIP
  C. WEP
  D. RC4

• Question 128:

  In an effort to optimize WLAN performance, ABC Company has upgraded their WLAN infrastructure from 802.11a/g to 802.11n. 802.11a/g clients are still supported and are used throughout ABC's facility. ABC has always been highly security conscious, but due to budget limitations, they have not yet updated their overlay WIPS solution to 802.11n or 802.11ac.

  Given ABC's deployment strategy, what security risks would not be detected by the 802.11a/g WIPS?

  A. Hijacking attack performed by using a rogue 802.11n AP against an 802.11a client
  B. Rogue AP operating in Greenfield 40 MHz-only mode
  C. 802.11a STA performing a deauthentication attack against 802.11n APs
  D. 802.11n client spoofing the MAC address of an authorized 802.11n client
  B. Rogue AP operating in Greenfield 40 MHz-only mode

• Question 129:

  ABC Company requires the ability to identify and quickly locate rogue devices. ABC has chosen an overlay WIPS solution with sensors that use dipole antennas to perform this task. Use your knowledge of location tracking techniques to answer the question.

  In what ways can this 802.11-based WIPS platform determine the location of rogue laptops or APs? (Choose 3)

  A. Time Difference of Arrival (TDoA)
  B. Angle of Arrival (AoA)
  C. Trilateration of RSSI measurements
  D. GPS Positioning
  E. RF Fingerprinting
  A. Time Difference of Arrival (TDoA)
  C. Trilateration of RSSI measurements
  E. RF Fingerprinting

• Question 130:

  Given: ABC Company secures their network with WPA2-Personal authentication and AES-CCMP encryption.

  What part of the 802.11 frame is always protected from eavesdroppers by this type of security?

  A. All MSDU contents
  B. All MPDU contents
  C. All PPDU contents
  D. All PSDU contents
  A. All MSDU contents