CWNP CWSP-207 Exam Questions Instant Access

Question 1

Given: Fred works primarily from home and public wireless hot-spots rather than commuting to the office. He frequently accesses the office network remotely from his Mac laptop using the local 802.11 WLAN.

In this remote scenario, what single wireless security practice will provide the greatest security for Fred?

AUse an IPSec VPN for connectivity to the office network

BUse only HTTPS when agreeing to acceptable use terms on public networks

CUse enterprise WIPS on the corporate office network

DUse WIPS sensor software on the laptop to monitor for risks and attacks

EUse 802.1X/PEAPv0 to connect to the corporate office network from public hot-spots

FUse secure protocols, such as FTP, for remote file transfers.

Answer : A

Question 2

What elements should be addressed by a WLAN security policy? (Choose 2)

AEnabling encryption to prevent MAC addresses from being sent in clear text

BHow to prevent non-IT employees from learning about and reading the user security policy

CEnd-user training for password selection and acceptable network use

DThe exact passwords to be used for administration interfaces on infrastructure devices

ESocial engineering recognition and mitigation techniques

Answer : C, E

Question 3

Given: AAA is an architectural framework used to provide three separate security components in a network. Listed below are three phrases that each describe one aspect of the AAA framework.

Option-1 --- This AAA function is performed first and validates user identify prior to determining the network resources to which they will be granted access.

Option-2 --- This function is used for monitoring and auditing purposes and includes the collection of data that identifies what a user has done while connected.

Option-3 --- This function is used to designate permissions to a particular user.

What answer correctly pairs the AAA component with the descriptions provided above?

AOption-1 -- Access Control
Option-2 -- Authorization
Option-3 -- Accounting

BOption-1 -- Authentication
Option-2 -- Accounting
Option-3 -- Association

COption-1 -- Authorization
Option-2 -- Access Control
Option-3 -- Association

DOption-1 -- Authentication
Option-2 -- Accounting
Option-3 -- Authorization

Answer : D

Question 4

You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4-way handshake.

Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)

ASTA1 and STA2 are using different cipher suites.

BSTA2 has retransmissions of EAP frames.

CSTA1 is a reassociation and STA2 is an initial association.

DSTA1 is a TSN, and STA2 is an RSN.

ESTA1 and STA2 are using different EAP types.

Answer : E

Question 5

Given: XYZ Company has recently installed a controller-based WLAN and is using a RADIUS server to query authentication requests to an LDAP server. XYZ maintains user-based access policies and would like to use the RADIUS server to facilitate network authorization.

What RADIUS features could be used by XYZ to assign the proper network permissions to users during authentication? (Choose 2)

AThe RADIUS server can communicate with the DHCP server to issue the appropriate IP address and VLAN assignment to users.

BThe RADIUS server can support vendor-specific attributes in the ACCESS-ACCEPT response, which can be used for user policy assignment.

CRADIUS can reassign a client's 802.11 association to a new SSID by referencing a username-to-SSID mapping table in the LDAP user database.

DRADIUS can send a DO-NOT-AUTHORIZE demand to the authenticator to prevent the STA from gaining access to specific files, but may only employ this in relation to Linux servers.

ERADIUS attributes can be used to assign permission levels, such as read-only permission, to users of a particular network resource.

Answer : B, E

Question 6

Given: Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a dedicated server named SRV21. One example client is a MacBook Pro with 8 GB RAM.

What device functions as the 802.1X/EAP Authenticator?

ASRV21

BWLAN Controller/AP

CMacBook Pro

DRADIUS server

Answer : B

Question 7

What WLAN client device behavior is exploited by an attacker during a hijacking attack?

AWhen the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.

BWhen the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.

CAfter the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.

DAs specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.

EClient drivers scan for and connect to access points in the 2.4 GHz band before scanning the 5 GHz band.

Answer : A

CWNP Certified Wireless Security Professional CWSP-207 Exam Questions