CWNP CWSP-208 Exam Questions Instant Access

Question 1

You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity. For what is the described utility used? (Choose 3)

AGenerating passwords for WLAN infrastructure equipment logins

BGenerating PMKs that can be imported into 802.11 RSN-compatible devices

CGenerating secret keys for RADIUS servers and WLAN infrastructure devices

DGenerating passphrases for WLAN systems secured with WPA2-Personal

EGenerating dynamic session keys used for IPSec VPNs

Answer : A, C, D

Question 2

What preventative measures are performed by a WIPS against intrusions?

AEAPoL Reject frame flood against a rogue AP

BEvil twin attack against a rogue AP

CDeauthentication attack against a classified neighbor AP

DASLEAP attack against a rogue AP

EUses SNMP to disable the switch port to which rogue APs connect

Answer : E

Question 3

What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?

AFast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.

BEAP-TLS does not protect the client's username and password inside an encrypted tunnel.

CEAP-TLS cannot establish a secure tunnel for internal EAP authentication.

DEAP-TLS is supported only by Cisco wireless infrastructure and client devices.

EEAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.

Answer : E

Question 4

Given: XYZ Company has recently installed an 802.11ac WLAN. The company needs the ability to control access to network services, such as file shares, intranet web servers, and Internet access based on an employee's job responsibilities.

What WLAN security solution meets this requirement?

AAn autonomous AP system with MAC filters

BWPA2-Personal with support for LDAP queries

CA VPN server with multiple DHCP scopes

DA WLAN controller with RBAC features

EA WLAN router with wireless VLAN support

Answer : D

Question 5

In order to acquire credentials of a valid user on a public hot-spot network, what attacks may be conducted? Choose the single completely correct answer.

ASocial engineering and/or eavesdropping

BRF DoS and/or physical theft

CMAC denial of service and/or physical theft

DAuthentication cracking and/or RF DoS

ECode injection and/or XSS

Answer : A

Question 6

In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

AIn home networks in which file and printer sharing is enabled

BAt public hot-spots in which many clients use diverse applications

CIn corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities

DIn university environments using multicast video training sourced from professor's laptops

Answer : B

Question 7

An attack is under way on the network. The attack is preventing users from accessing resources required for business operations, but the attacker has not gained access to any files or dat

a. What kind of attack is described?

AMan-in-the-middle

BHijacking

CASLEAP

DDoS

Answer : D

CWNP Certified Wireless Security Professional (CWSP) CWSP-208 Exam Questions