CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 51:

  ABC Company uses the wireless network for highly sensitive network traffic. For that reason, they intend to protect their network in all possible ways. They are continually researching new network threats and new preventative measures.

  They are interested in the security benefits of 802.11w, but would like to know its limitations.

  What types of wireless attacks are protected by 802.11w? (Choose 2)

  A. RF DoS attacks
  B. Layer 2 Disassociation attacks
  C. Robust management frame replay attacks
  D. Social engineering attacks
  B. Layer 2 Disassociation attacks
  C. Robust management frame replay attacks

• Question 52:

  Given: AAA is an architectural framework used to provide three separate security components in a network.

  Listed below are three phrases that each describe one aspect of the AAA framework.

  Option-1 - This AAA function is performed first and validates user identify prior to determining the network resources to which they will be granted access. Option-2 - This function is used for monitoring and auditing purposes and includes the collection of data that identifies what a user has done while connected.

  Option-3 - This function is used to designate permissions to a particular user.

  What answer correctly pairs the AAA component with the descriptions provided above?

  A. Option-1 - Access Control Option-2 - Authorization Option-3 - Accounting
  B. Option-1 - Authentication Option-2 - Accounting Option-3 - Association
  C. Option-1 - Authorization Option-2 - Access Control Option-3 - Association
  D. Option-1 - Authentication Option-2 - Accounting Option-3 - Authorization
  D. Option-1 - Authentication Option-2 - Accounting Option-3 - Authorization

• Question 53:

  Given: A WLAN consultant recommends blocking direct client-to-client communication on a guest network used by visitors in a conference center.

  What risk is this recommendation primarily intended to reduce?

  A. Adjacent channel interference
  B. Peer-to-peer attacks between guest users
  C. RADIUS shared secret exposure
  D. AP management VLAN failure
  B. Peer-to-peer attacks between guest users

• Question 54:

  Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

  A. The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK. The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.
  B. If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user's passphrase. The PMK is then used during the 4-way handshake to create data encryption keys.
  C. After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK, is derived from the AAA key and is hashed with the PMK to create the PTK and GTK.
  D. The PMK is generated from a successful mutual EAP authentication. When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake.
  A. The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK. The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.

• Question 55:

  Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

  A. Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.
  B. Allow access to specific files and applications based on the user's WMM access category.
  C. Provide two or more user groups connected to the same SSID with different levels of network privileges.
  D. Allow simultaneous support for multiple EAP types on a single access point.
  C. Provide two or more user groups connected to the same SSID with different levels of network privileges.

• Question 56:

  Select the answer option that arranges the numbered events in the correct time sequence for a secure guest user connecting to an open network that uses a captive portal and OWE.

  1. The client associates to the BSS

  2. OWE key establishment occurs

  3. The client exchanges traffic using encryption on the open WLAN

  4. The user completes captive portal access requirements

  A. 1-2-3-4
  B. 2-1-3-4
  C. 1-3-2-4
  D. 4-1-2-3
  A. 1-2-3-4

• Question 57:

  A single AP is configured with three separate WLAN profiles, as follows:

  1. SSID: ABCData - BSSID: 00:11:22:00:1F:C3 - VLAN 10 - Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 3 current clients

  2. SSID: ABCVoice - BSSID: 00:11:22:00:1F:C4 - VLAN 60 - Security: WPA2-Personal with AES-CCMP - 2 current clients

  3. SSID: Guest - BSSID: 00:11:22:00:1F:C5 - VLAN 90 - Security: Open with captive portal authentication - 3 current clients Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.

  How many unique GTKs and PTKs are currently in place in this scenario?

  A. 1 GTK - 8 PTKs
  B. 2 GTKs - 5 PTKs
  C. 2 GTKs - 8 PTKs
  D. 3 GTKs - 8 PTKs
  B. 2 GTKs - 5 PTKs

• Question 58:

  Which cryptographic suite is mandatory for Robust Security Networks (RSN)?

  A. TKIP
  B. RC4
  C. CCMP
  D. LEAP
  C. CCMP

• Question 59:

  Which frame exchange immediately follows successful 802.1X authentication in a WPA2-Enterprise environment?

  A. Group Key Handshake
  B. Association Response
  C. 4-Way Handshake
  D. EAP Success acknowledgment
  C. 4-Way Handshake

• Question 60:

  A wireless security professional is reviewing infrastructure management practices and must recommend safer management methods for APs and controllers.

  Which protocols should be avoided because they are weak or outdated? (Choose 3)

  A. HTTP for administration access
  B. SSHv2
  C. Telnet
  D. SNMPv1
  E. HTTPS
  A. HTTP for administration access
  C. Telnet
  D. SNMPv1