CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 31:

  What protocols allow a network administrator to securely manage the configuration of WLAN controllers and access points? (Choose 2)

  A. SNMPv1
  B. HTTPS
  C. Telnet
  D. TFTP
  E. FTP
  F. SSHv2
  B. HTTPS
  F. SSHv2

• Question 32:

  Given: An organization is introducing employee-owned mobile devices onto the corporate WLAN. Security leadership wants controls for device posture, onboarding, and ongoing policy enforcement.

  Which combination best addresses this requirement? (Choose 2)

  A. BYOD and MDM
  B. NAC and client onboarding
  C. Hidden SSIDs and WEP
  D. SNMPv1 and Telnet
  A. BYOD and MDM
  B. NAC and client onboarding

• Question 33:

  The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames.

  In a WPA2-Enterprise network, what process immediately follows the 802.11 association procedure?

  A. Group Key Handshake
  B. 802.1X/EAP authentication
  C. DHCP Discovery
  D. 4-Way Handshake
  E. Passphrase-to-PSK mapping
  F. RADIUS shared secret lookup
  B. 802.1X/EAP authentication

• Question 34:

  Given: Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a dedicated server named SRV21.

  One example client is a MacBook Pro with 8 GB RAM.

  What device functions as the 802.1X/EAP Authenticator?

  A. SRV21
  B. WLAN Controller/AP
  C. MacBook Pro
  D. RADIUS server
  B. WLAN Controller/AP

• Question 35:

  When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

  A. X.509 certificates
  B. User credentials
  C. Server credentials
  D. RADIUS shared secret
  B. User credentials

• Question 36:

  Given: Fred works primarily from home and public wireless hot-spots rather than commuting to the office. He frequently accesses the office network remotely from his Mac laptop using the local 802.11 WLAN.

  In this remote scenario, what single wireless security practice will provide the greatest security for Fred?

  A. Use an IPSec VPN for connectivity to the office network
  B. Use only HTTPS when agreeing to acceptable use terms on public networks
  C. Use enterprise WIPS on the corporate office network
  D. Use WIPS sensor software on the laptop to monitor for risks and attacks
  E. Use 802.1X/PEAPv0 to connect to the corporate office network from public hot-spots
  F. Use secure protocols, such as FTP, for remote file transfers.
  A. Use an IPSec VPN for connectivity to the office network

• Question 37:

  When implementing a WPA2-Enterprise security solution, what protocol must the selected RADIUS server support?

  A. LWAPP, GRE, or CAPWAP
  B. IPSec/ESP
  C. EAP
  D. CCMP and TKIP
  E. LDAP
  C. EAP

• Question 38:

  For a WIPS system to identify the location of a rogue WLAN device using location patterning (RF fingerprinting), what must be done as part of the WIPS installation?

  A. All WIPS sensors must be installed as dual-purpose (AP/sensor) devices.
  B. A location chipset (GPS) must be installed with it.
  C. At least six antennas must be installed in each sensor.
  D. The RF environment must be sampled during an RF calibration process.
  D. The RF environment must be sampled during an RF calibration process.

• Question 39:

  What elements should be addressed by a WLAN security policy? (Choose 2)

  A. Enabling encryption to prevent MAC addresses from being sent in clear text
  B. How to prevent non-IT employees from learning about and reading the user security policy
  C. End-user training for password selection and acceptable network use
  D. The exact passwords to be used for administration interfaces on infrastructure devices
  E. Social engineering recognition and mitigation techniques
  C. End-user training for password selection and acceptable network use
  E. Social engineering recognition and mitigation techniques

• Question 40:

  Given: The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources.

  What single WLAN security feature should be implemented to comply with these requirements?

  A. Mutual authentication
  B. Captive portal
  C. Role-based access control
  D. Group authentication
  E. RADIUS policy accounting
  C. Role-based access control