CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 11:

  Joe's new laptop is experiencing difficulty connecting to ABC Company's 802.11 WLAN using 802.1X/EAP PEAPv0. The company's wireless network administrator assured Joe that his laptop was authorized in the WIPS management console for connectivity to ABC's network before it was given to him. The WIPS termination policy includes alarms for rogue stations, roque APs, DoS attacks and unauthorized roaming.

  What is a likely reason that Joe cannot connect to the network?

  A. Joe disabled his laptop's integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.
  B. Joe's integrated 802.11 radio is sending multiple Probe Request frames on each channel.
  C. An ASLEAP attack has been detected on APs to which Joe's laptop was trying to associate. The WIPS responded by disabling the APs.
  D. Joe configured his 802.11 radio card to transmit at 100 mW to increase his SNR. The WIPS is detecting this much output power as a DoS attack.
  A. Joe disabled his laptop's integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.

• Question 12:

  What type of WLAN attack is prevented with the use of a per-MPDU TKIP sequence counter (TSC)?

  A. Weak-IV
  B. Forgery
  C. Replay
  D. Bit-flipping
  E. Session hijacking
  C. Replay

• Question 13:

  In the IEEE 802.11-2012 standard, what is the purpose of the 802.1X Uncontrolled Port?

  A. To allow only authentication frames to flow between the Supplicant and Authentication Server
  B. To block authentication traffic until the 4-Way Handshake completes
  C. To pass general data traffic after the completion of 802.11 authentication and key management
  D. To block unencrypted user traffic after a 4-Way Handshake completes
  A. To allow only authentication frames to flow between the Supplicant and Authentication Server

• Question 14:

  A WLAN engineer must explain the difference between pairwise and group protection in an RSN.

  Which key is used to protect broadcast and multicast traffic?

  A. PMK
  B. PTK
  C. GTK
  D. MSK
  C. GTK

• Question 15:

  What field in the RSN information element (IE) will indicate whether PSK-or Enterprise-based WPA or WPA2 is in use?

  A. AKM Suite List
  B. Group Cipher Suite
  C. RSN Capabilities
  D. Pairwise Cipher Suite List
  A. AKM Suite List

• Question 16:

  When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used by the WNMS to issue configuration changes to APs?

  A. IPSec/ESP
  B. TFTP
  C. 802.1X/EAP
  D. SNMPv3
  E. PPTP
  D. SNMPv3

• Question 17:

  A rogue AP is broadcasting the same SSID as the corporate network but uses open authentication.

  Which attack type is being performed?

  A. Evil twin attack
  B. Replay attack
  C. MAC spoofing
  D. Jamming
  A. Evil twin attack

• Question 18:

  Given: ABC Company has recently installed a WLAN controller and configured it to support WPA2-Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing, Sales, and Engineering).

  How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

  A. The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.
  B. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.
  C. The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.
  D. The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.
  B. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

• Question 19:

  Which IEEE 802.11 feature enables the protection of management frames from spoofing and replay attacks?

  A. RSN Capabilities
  B. Management Frame Protection (MFP)
  C. Protected Extensible Authentication Protocol
  D. Pairwise Master Key Caching
  B. Management Frame Protection (MFP)

• Question 20:

  Wireless Intrusion Prevention Systems (WIPS) are used for what purposes? (Choose 3)

  A. Performance monitoring and troubleshooting
  B. Enforcing wireless network security policy
  C. Detecting and defending against eavesdropping attacks
  D. Security monitoring and notification
  E. Preventing physical carrier sense attacks
  F. Classifying wired client devices
  A. Performance monitoring and troubleshooting
  B. Enforcing wireless network security policy
  D. Security monitoring and notification