CWNP Certified Wireless Security Professional (CWSP) - CWSP-208 FREE EXAM DUMPS QUESTIONS & ANSWERS

A. Before connecting to the bank's website, John's association to the AP was hijacked. The attacker intercepted the HTTPS public encryption key from the bank's web server and has decrypted John's login credentials in near real-time. B. John uses the same username and password for banking that he does for email. John used a POP3 email client at the wireless hot-spot to check his email, and the user ID and password were not encrypted. C. John accessed his corporate network with his IPSec VPN software at the wireless hot-spot. An IPSec VPN only encrypts data, so the user ID and password were sent in clear text. John uses the same username and password for banking that he does for his IPSec VPN software. D. John's bank is using an expired X.509 certificate on their web server. The certificate is on John's Certificate Revocation List (CRL), causing the user ID and password to be sent unencrypted. E. The bank's web server is using an X.509 certificate that is not signed by a root CA, causing the user ID and password to be sent unencrypted.

A. Output power B. Fragmentation threshold C. Administrative password D. Cell radius

A. An unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user's 4-Way Handshake. B. Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users. C. A successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client. D. An unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic. E. Because WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.

A. Supplicant B. Control Point C. Authenticator D. Registrar E. Enrollee F. AAA Server G. Authentication Server

A. Encrypted Passphrase Protocol (EPP) B. Multi-factor authentication C. 4-Way Handshake D. Group Temporal Keys E. Integrity Check Value (ICV) F. PLCP Cyclic Redundancy Check (CRC)

A. At public hot-spots in which many clients use diverse applications B. In home networks in which file and printer sharing is enabled C. In corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities D. In university environments using multicast video training sourced from professor's laptops

A. EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead. B. Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use. C. EAP-TLS does not protect the client's username and password inside an encrypted tunnel. D. EAP-TLS is supported only by Cisco wireless infrastructure and client devices. E. EAP-TLS cannot establish a secure tunnel for internal EAP authentication.

A. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ. B. RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet. C. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link. D. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

A. 802.1X/EAP B. IPSec/ESP C. PPTP D. TFTP E. SNMPv3

A. H-REAP B. EAP-GTC C. EAP-TTLS D. PEAP E. LEAP