CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 141:

  Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individualshave raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.

  As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication? (Choose 2)

  A. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
  B. MS-CHAPv2 is subject to offline dictionary attacks.
  C. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.
  D. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
  E. MS-CHAPv2 uses AES authentication, and is therefore secure.
  F. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
  B. MS-CHAPv2 is subject to offline dictionary attacks.
  D. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.

• Question 142:

  Wireless Intrusion Prevention Systems (WIPS) provide what network security services? (Choose 2)

  A. Configuration distribution for autonomous APs
  B. Wireless vulnerability assessment
  C. Application-layer traffic inspection
  D. Analysis and reporting of AP CPU utilization
  E. Policy enforcement and compliance management
  B. Wireless vulnerability assessment
  E. Policy enforcement and compliance management

• Question 143:

  What wireless security protocol provides mutual authentication without using an X.

  509 certificate?

  A. EAP-FAST
  B. EAP-MD5
  C. EAP-TLS
  D. PEAPv0/EAP-MSCHAPv2
  E. EAP-TTLS
  F. PEAPv1/EAP-GTC
  A. EAP-FAST

• Question 144:

  What function does the Group Temporal Key (GTK) perform in a WPA2 network?

  A. Encrypts unicast traffic between client and AP
  B. Encrypts broadcast and multicast frames
  C. Generates the Pairwise Master Key
  D. Authenticates RADIUS communication
  B. Encrypts broadcast and multicast frames

• Question 145:

  Given: You support a coffee shop and have recently installed a free 802.11ac wireless hot-spot for the benefit of your customers. You want to minimize legal risk in the event that the hot-spot is used for illegal Internet activity.

  What option specifies the best approach to minimize legal risk at this public hot-spot while maintaining an open venue for customer Internet access?

  A. Configure WPA2-Enterprise security on the access point
  B. Block TCP port 25 and 80 outbound on the Internet router
  C. Require client STAs to have updated firewall and antivirus software
  D. Allow only trusted patrons to use the WLAN
  E. Use a WIPS to monitor all traffic and deauthenticate malicious stations
  F. Implement a captive portal with an acceptable use disclaimer
  F. Implement a captive portal with an acceptable use disclaimer

• Question 146:

  When TKIP is selected as the pairwise cipher suite, what frame types may be protected with data confidentiality? (Choose 2)

  A. Robust broadcast management
  B. Robust unicast management
  C. Control
  D. Data
  E. ACK
  F. QoS Data
  D. Data
  F. QoS Data

• Question 147:

  What is the primary security goal of implementing PMF (Protected Management Frames)?

  A. Prevent unauthorized DHCP assignment
  B. Protect against disassociation and deauthentication attacks
  C. Encrypt all broadcast data frames
  D. Block rogue AP beaconing
  B. Protect against disassociation and deauthentication attacks

• Question 148:

  Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11.

  What kind of troubleshooting are you likely performing with such a tool?

  A. Wireless adapter failure analysis.
  B. Interference source location.
  C. Fast secure roaming problems.
  D. Narrowband DoS attack detection.
  C. Fast secure roaming problems.

• Question 149:

  Given: During a wireless security audit, the analyst needs to monitor events from distributed WLAN devices and correlate them with other security sources in a central platform.

  What solution is best aligned with this requirement?

  A. SIEM
  B. DHCP relay
  C. NAT
  D. QoS
  A. SIEM

• Question 150:

  Given: You must implement 7 APs for a branch office location in your organization. All APs will be autonomous and provide the same two SSIDs (CORP1879 and Guest).

  Because each AP is managed directly through a web-based interface, what must be changed on every AP before enabling the WLANs to ensure proper staging procedures are followed?

  A. Fragmentation threshold
  B. Administrative password
  C. Output power
  D. Cell radius
  B. Administrative password