CWNP Certified Wireless Security Professional (CWSP) - CWSP-208 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used by the WNMS to issue configuration changes to APs?

A. 802.1X/EAP B. IPSec/ESP C. PPTP D. TFTP E. SNMPv3

Discussion 0

Correct Answer: E Vote an answer

Question 2

What administration component connected with wireless networks can be used in all systems supporting it to provide access and authorization based on individual groups, departments, users and possibly other parameters?

A. Access control list (ACL) B. Discretionary access control (DAC) C. Mandatory access control (MAC) D. Role based access control (RBAC)

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism. As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

A. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming. B. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1. C. The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next. D. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Given: A WLAN protocol analyzer trace reveals the following sequence of frames (excluding the ACK frames):
1) 802.11 Probe Req and 802.11 Probe Rsp
2) 802.11 Auth and then another 802.11 Auth
3) 802.11 Assoc Req and 802.11 Assoc Rsp
4) EAPOL-KEY
5) EAPOL-KEY
6) EAPOL-KEY
7) EAPOL-KEY
What security mechanism is being used on the WLAN?

A. EAP-TLS B. WPA2-Personal C. WPA-Enterprise D. WEP-128 E. 802.1X/LEAP

Discussion 0

Correct Answer: B Vote an answer

Question 5

While performing a manual scan of your environment using a spectrum analyzer on a laptop computer, you notice a signal in the real time FFT view. The signal is characterized by having peak power centered on channel 11 with an approximate width of 20 MHz at its peak. The signal widens to approximately 40 MHz after it has weakened by about 30 dB. What kind of signal is displayed in the spectrum analyzer?

A. An 802.11g AP operating normally in 2.4 GHz B. An 802.11a AP operating normally in 5 GHz C. A frequency hopping device is being used as a signal jammer in 5 GHz D. A low-power wideband RF attack is in progress in 2.4 GHz, causing significant 802.11 interference

Discussion 0

Correct Answer: A Vote an answer

Question 6

Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

A. Provide two or more user groups connected to the same SSID with different levels of network privileges. B. Allow simultaneous support for multiple EAP types on a single access point. C. Allow access to specific files and applications based on the user's WMM access category. D. Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.

Discussion 0

Correct Answer: A Vote an answer

Question 7

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections.
XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

A. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate. B. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP. C. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP. D. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP.

Discussion 0

Correct Answer: B Vote an answer

Question 8

Which of the following is the best method for detecting rogue access points in a wireless network?

A. Regular wireless site surveys B. Implement MAC address filtering C. Disable SSID broadcasting D. Use WPA2 encryption

Discussion 0

Correct Answer: A Vote an answer

Question 9

Which wireless security protocol is considered the most secure and is mandatory for all Wi-Fi Certified devices since 2020?

A. WEP B. WPA C. WPA3 D. WPA2

Discussion 0

Correct Answer: C Vote an answer