CWNP CWSP-208 Online Practice Questions and Exam Preparation

CWNP CWSP-208 Online Questions & Answers

• Question 71:

  Given: A hospital is updating its WLAN security policy for a new wireless network that will carry protected health information. Management wants the policy effort to begin with the people who can approve requirements, enforce operational changes, and ensure user participation.

  Who should be identified first as part of the WLAN security requirements process?

  A. Only the wireless LAN installers
  B. Appropriate stakeholders
  C. Only the help desk team
  D. Only the application developers
  B. Appropriate stakeholders

• Question 72:

  What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

  A. MAC Spoofing
  B. Eavesdropping
  C. Hot-spotter
  D. Soft AP
  E. Deauthentication flood
  F. EAP flood
  B. Eavesdropping

• Question 73:

  While performing a manual scan of your environment using a spectrum analyzer on a laptop computer, you notice a signal in the real time FFT view. The signal is characterized by having peak power centered on channel 11 with an approximate width of 20 MHz at its peak. The signal widens to approximately 40 MHz after it has weakened by about 30 dB.

  What kind of signal is displayed in the spectrum analyzer?

  A. A frequency hopping device is being used as a signal jammer in 5 GHz
  B. A low-power wideband RF attack is in progress in 2.4 GHz, causing significant 802.11 interference
  C. An 802.11g AP operating normally in 2.4 GHz
  D. An 802.11a AP operating normally in 5 GHz
  C. An 802.11g AP operating normally in 2.4 GHz

• Question 74:

  Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.

  What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

  A. All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.
  B. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.
  C. Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.
  D. Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.
  E. The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.
  B. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.

• Question 75:

  Given: You are using WEP as an encryption solution. You are using VLANs for network segregation.

  Why can you not establish an RSNA?

  A. RSNA connections require TKIP or CCMP.
  B. RSNA connections require BIP and do not support TKIP, CCMP or WEP.
  C. RSNA connections require CCMP and do not support TKIP or WEP.
  D. RSNA connections do not work in conjunction with VLANs.
  A. RSNA connections require TKIP or CCMP.

• Question 76:

  What wireless authentication technologies may build a TLS tunnel between the supplicant and the authentication server before passing client authentication credentials to the authentication server? (Choose 3)

  A. EAP-MD5
  B. EAP-TLS
  C. LEAP
  D. PEAPv0/MSCHAPv2
  E. EAP-TTLS
  B. EAP-TLS
  D. PEAPv0/MSCHAPv2
  E. EAP-TTLS

• Question 77:

  What is a primary criteria for a network to qualify as a Robust Security Network (RSN)?

  A. Token cards must be used for authentication.
  B. Dynamic WEP-104 encryption must be enabled.
  C. WEP may not be used for encryption.
  D. WPA-Personal must be supported for authentication and encryption.
  E. WLAN controllers and APs must not support SSHv1.
  C. WEP may not be used for encryption.

• Question 78:

  You are implementing an 802.11ac WLAN and a WIPS at the same time. You must choose between integrated and overlay WIPS solutions.

  Which of the following statements is true regarding integrated WIPS solutions?

  A. Integrated WIPS always perform better from a client throughput perspective because the same radio that performs the threat scanning also services the clients.
  B. Integrated WIPS use special sensors installed alongside the APs to scan for threats.
  C. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.
  D. Integrated WIPS is always more expensive than overlay WIPS.
  C. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.

• Question 79:

  Which of the following best describes Opportunistic Key Caching (OKC)?

  A. Key caching technique that allows re-use of PMK across APs under the same controller
  B. Dynamic key generation for each session between STA and RADIUS
  C. Mechanism to refresh GTK after every association
  D. 802.11w key confirmation protocol
  A. Key caching technique that allows re-use of PMK across APs under the same controller

• Question 80:

  What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

  A. The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.
  B. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.
  C. The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.
  D. The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.
  B. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.