CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 61:

  Which statement correctly defines the role of the Authenticator in 802.1X authentication?

  A. It generates encryption keys for clients
  B. It relays EAP messages between the Supplicant and Authentication Server
  C. It verifies the server certificate
  D. It provides IP addressing for authenticated clients
  B. It relays EAP messages between the Supplicant and Authentication Server

• Question 62:

  Given: An 802.1X/EAP implementation includes an Active Directory domain controller running Windows Server 2012 and an AP from a major vendor. A Linux server is running RADIUS and it queries the domain controller for user credentials.

  A Windows client is accessing the network.

  What device functions as the EAP Supplicant?

  A. Linux server
  B. Windows client
  C. Access point
  D. Windows server
  E. An unlisted switch
  F. An unlisted WLAN controller
  B. Windows client

• Question 63:

  What is a primary advantage of WPA3-Enterprise over WPA2-Enterprise?

  A. Uses longer passphrases
  B. Requires Protected Management Frames
  C. Uses 192-bit minimum cryptographic strength
  D. Eliminates need for RADIUS
  C. Uses 192-bit minimum cryptographic strength

• Question 64:

  In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

  A. In home networks in which file and printer sharing is enabled
  B. At public hot-spots in which many clients use diverse applications
  C. In corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities
  D. In university environments using multicast video training sourced from professor's laptops
  B. At public hot-spots in which many clients use diverse applications

• Question 65:

  What statement is true regarding the nonces (ANonce and SNonce) used in the IEEE 802.11 4 Way Handshake?

  A. Both nonces are used by the Supplicant and Authenticator in the derivation of a single PTK.
  B. The Supplicant uses the SNonce to derive its unique PTK and the Authenticator uses the ANonce to derive its unique PTK, but the nonces are not shared.
  C. Nonces are sent in EAPoL frames to indicate to the receiver that the sending station has installed and validated the encryption keys.
  D. The nonces are created by combining the MAC addresses of the Supplicant, Authenticator, and Authentication Server into a mixing algorithm.
  A. Both nonces are used by the Supplicant and Authenticator in the derivation of a single PTK.

• Question 66:

  You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity.

  For what is the described utility used? (Choose 3)

  A. Generating passwords for WLAN infrastructure equipment logins
  B. Generating PMKs that can be imported into 802.11 RSN-compatible devices
  C. Generating secret keys for RADIUS servers and WLAN infrastructure devices
  D. Generating passphrases for WLAN systems secured with WPA2-Personal
  E. Generating dynamic session keys used for IPSec VPNs
  A. Generating passwords for WLAN infrastructure equipment logins
  C. Generating secret keys for RADIUS servers and WLAN infrastructure devices
  D. Generating passphrases for WLAN systems secured with WPA2-Personal

• Question 67:

  Given: A network security auditor is preparing to perform a comprehensive assessment of an 802.11ac network's security.

  What task should be performed at the beginning of the audit to maximize the auditor's ability to expose network vulnerabilities?

  A. Identify the IP subnet information for each network segment.
  B. Identify the manufacturer of the wireless intrusion prevention system.
  C. Identify the skill level of the wireless network security administrator(s).
  D. Identify the manufacturer of the wireless infrastructure hardware.
  E. Identify the wireless security solution(s) currently in use.
  E. Identify the wireless security solution(s) currently in use.

• Question 68:

  What software and hardware tools are used together to hijack a wireless station from the authorized wireless network onto an unauthorized wireless network? (Choose 2)

  A. RF jamming device and a wireless radio card
  B. A low-gain patch antenna and terminal emulation software
  C. A wireless workgroup bridge and a protocol analyzer
  D. DHCP server software and access point software
  E. MAC spoofing software and MAC DoS software
  A. RF jamming device and a wireless radio card
  D. DHCP server software and access point software

• Question 69:

  Given: Many corporations configure guest VLANs on their WLAN controllers that allow visitors to have Internet access only. The guest traffic is tunneled to the DMZ to prevent some security risks.

  In this deployment, what risks are still associated with implementing the guest VLAN without any advanced traffic monitoring or filtering features enabled? (Choose 2)

  A. Intruders can send spam to the Internet through the guest VLAN.
  B. Peer-to-peer attacks can still be conducted between guest users unless application-layer monitoring and filtering are implemented.
  C. Unauthorized users can perform Internet-based network attacks through the WLAN.
  D. Guest users can reconfigure AP radios servicing the guest VLAN unless unsecure network management protocols (e.g. Telnet, HTTP) are blocked.
  E. Once guest users are associated to the WLAN, they can capture 802.11 frames from the corporate VLANs.
  A. Intruders can send spam to the Internet through the guest VLAN.
  C. Unauthorized users can perform Internet-based network attacks through the WLAN.

• Question 70:

  Given: Your company has just completed installation of an IEEE 802.11 WLAN controller with 20 controller-based APs. The CSO has specified PEAPv0/EAP-MSCHAPv2 as the only authorized WLAN authentication mechanism. Since an LDAP-compliant user database was already in use, a RADIUS server was installed and is querying authentication requests to the LDAP server.

  Where must the X.

  509 server certificate and private key be installed in this network?

  A. Supplicant devices
  B. LDAP server
  C. Controller-based APs
  D. WLAN controller
  E. RADIUS server
  E. RADIUS server