CWNP CWSP-208 Exam Questions Instant Access

Question 1

Given: You have implemented strong authentication and encryption mechanisms for your enterprise 802.11 WLAN using 802.1X/EAP with AES-CCMP.

For users connecting within the headquarters office, what other security solution will provide continuous monitoring of both clients and APs with 802.11-specific tracking?

AIPSec VPN client and server software

BInternet firewall software

CWireless intrusion prevention system

DWLAN endpoint agent software

ERADIUS proxy server

Answer : C

Question 2

You perform a protocol capture using Wireshark and a compatible 802.11 adapter in Linux. When viewing the capture, you see an auth req frame and an auth rsp frame. Then you see an assoc req frame and an assoc rsp frame. Shortly after, you see DHCP communications and then ISAKMP protocol packets. What security solution is represented?

A802.1X/EAP-TTLS

BOpen 802.11 authentication with IPSec

C802.1X/PEAPv0/MS-CHAPv2

DWPA2-Personal with AES-CCMP

EEAP-MD5

Answer : B

Question 3

Given: You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames):

1) 802.11 Probe Request and 802.11 Probe Response

2) 802.11 Auth and another 802.11 Auth

2) 802.11 Assoc Req and 802.11 Assoc Rsp

4) EAPOL-Start

5) EAP Request and EAP Response

6) EAP Request and EAP Response

7) EAP Request and EAP Response

8) EAP Request and EAP Response

9) EAP Request and EAP Response

10) EAP Success

19) EAPOL-Key (4 frames in a row)

What are you seeing in the capture file? (Choose 4)

AWPA2-Enterprise authentication

BWPA2-Personal authentication

C802.11 Open System authentication

D802.1X with Dynamic WEP

EWi-Fi Protected Setup with PIN

FActive Scanning

G4-Way Handshake

Answer : A, C, F, G

Question 4

Given: You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet. What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations? (Choose the single best answer.)

AUser external antennas.

BUse internal antennas.

CPower the APs using PoE.

DEnsure proper physical and environmental security using outdoor ruggedized APs or enclosures.

Answer : D

Question 5

Given: When the CCMP cipher suite is used for protection of data frames, 16 bytes of overhead are added to the Layer 2 frame. 8 of these bytes comprise the MIC.

What purpose does the encrypted MIC play in protecting the data frame?

AThe MIC is used as a first layer of validation to ensure that the wireless receiver does not incorrectly process corrupted signals.

BThe MIC provides for a cryptographic integrity check against the data payload to ensure that it matches the original transmitted data.

CThe MIC is a hash computation performed by the receiver against the MAC header to detect replay attacks prior to processing the encrypted payload.

DThe MIC is a random value generated during the 4-way handshake and is used for key mixing to enhance the strength of the derived PTK.

Answer : B

Question 6

You must support a TSN as you have older wireless equipment that will not support the required processing of AES encryption. Which one of the following technologies will you use on the network so that a TSN can be implemented that would not be required in a network compliant with 802.11-2012 non-deprecated technologies?

AWEP

BRC4

CCCMP

DWPA2
Topic 4, Security Lifecycle Management

Answer : B

Question 7

Given: WLAN protocol analyzers can read and record many wireless frame parameters.

What parameter is needed to physically locate rogue APs with a protocol analyzer?

ASSID

BIP Address

CBSSID

DSignal strength

ERSN IE

FNoise floor

Answer : D

CWNP Certified Wireless Security Professional (CWSP) CWSP-208 Exam Questions