CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 131:

  When using WPA3-Personal, what key establishment method replaces the traditional 4-way handshake?

  A. SAE (Simultaneous Authentication of Equals)
  B. EAP-TLS
  C. Opportunistic Key Caching
  D. Pre-Shared Key (PSK)
  A. SAE (Simultaneous Authentication of Equals)

• Question 132:

  What are the three roles of the 802.1X framework, as defined by the 802.1X standard, that are performed by the client STA, the AP (or WLAN controller), and the RADIUS server? (Choose 3)

  A. Enrollee
  B. Registrar
  C. AAA Server
  D. Authentication Server
  E. Supplicant
  F. Authenticator
  G. Control Point
  D. Authentication Server
  E. Supplicant
  F. Authenticator

• Question 133:

  Given: WLAN protocol analyzers can read and record many wireless frame parameters.

  What parameter is needed to physically locate rogue APs with a protocol analyzer?

  A. SSID
  B. IP Address
  C. BSSID
  D. Signal strength
  E. RSN IE
  F. Noise floor
  D. Signal strength

• Question 134:

  When using the 802.1X/EAP framework for authentication in 802.11 WLANs, why is the 802.1X Controlled Port still blocked after the 802.1X/EAP framework has completed successfully?

  A. The 802.1X Controlled Port is always blocked, but the Uncontrolled Port opens after the EAP authentication process completes.
  B. The 802.1X Controlled Port remains blocked until an IP address is requested and accepted by the Supplicant.
  C. The 4-Way Handshake must be performed before the 802.1X Controlled Port changes to the unblocked state.
  D. The 802.1X Controlled Port is blocked until Vender Specific Attributes (VSAs) are exchanged inside a RADIUS packet between the Authenticator and Authentication Server.
  C. The 4-Way Handshake must be performed before the 802.1X Controlled Port changes to the unblocked state.

• Question 135:

  As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods.

  When writing the 802.11 security policy, what password-related items should be addressed?

  A. MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.
  B. Password complexity should be maximized so that weak WEP IV attacks are prevented.
  C. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.
  D. Certificates should always be recommended instead of passwords for 802.11 client authentication.
  E. EAP-TLS must be implemented in such scenarios.
  C. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.

• Question 136:

  When used as part of a WLAN authentication solution, what is the role of LDAP?

  A. A data retrieval protocol used by an authentication service such as RADIUS
  B. An IEEE X.500 standard compliant database that participates in the 802.1X port-based access control process
  C. A SQL compliant authentication service capable of dynamic key generation and distribution
  D. A role-based access control protocol for filtering data to/from authenticated stations.
  E. An Authentication Server (AS) that communicates directly with, and provides authentication for, the Supplicant.
  A. A data retrieval protocol used by an authentication service such as RADIUS

• Question 137:

  Given: When the CCMP cipher suite is used for protection of data frames, 16 bytes of overhead are added to the Layer 2 frame. 8 of these bytes comprise the MIC.

  What purpose does the encrypted MIC play in protecting the data frame?

  A. The MIC is used as a first layer of validation to ensure that the wireless receiver does not incorrectly process corrupted signals.
  B. The MIC provides for a cryptographic integrity check against the data payload to ensure that it matches the original transmitted data.
  C. The MIC is a hash computation performed by the receiver against the MAC header to detect replay attacks prior to processing the encrypted payload.
  D. The MIC is a random value generated during the 4-way handshake and is used for key mixing to enhance the strength of the derived PTK.
  B. The MIC provides for a cryptographic integrity check against the data payload to ensure that it matches the original transmitted data.

• Question 138:

  A company using 802.1X/EAP-TLS requires client-side certificates.

  What infrastructure component is mandatory?

  A. LDAP directory
  B. Public Key Infrastructure (PKI)
  C. Kerberos Key Distribution Center
  D. TACACS+ server
  B. Public Key Infrastructure (PKI)

• Question 139:

  As a part of a large organization's security policy, how should a wireless security professional address the problem of rogue access points?

  A. Use a WPA2-Enterprise compliant security solution with strong mutual authentication and encryption for network access of corporate devices.
  B. Hide the SSID of all legitimate APs on the network so that intruders cannot copy this parameter on rogue APs.
  C. Conduct thorough manual facility scans with spectrum analyzers to detect rogue AP RF signatures.
  D. A trained employee should install and configure a WIPS for rogue detection and response measures.
  E. Enable port security on Ethernet switch ports with a maximum of only 3 MAC addresses on each port.
  D. A trained employee should install and configure a WIPS for rogue detection and response measures.

• Question 140:

  Given: ABC Company is deploying an IEEE 802.11-compliant wireless security solution using 802.1X/EAP authentication. According to company policy, the security solution must prevent an eavesdropper from decrypting data frames traversing a wireless connection.

  What security characteristics and/or components play a role in preventing data decryption? (Choose 2)

  A. Multi-factor authentication
  B. 4-Way Handshake
  C. PLCP Cyclic Redundancy Check (CRC)
  D. Encrypted Passphrase Protocol (EPP)
  E. Integrity Check Value (ICV)
  F. Group Temporal Keys
  B. 4-Way Handshake
  F. Group Temporal Keys