CWNP CWSP-206 Exam Syllabus Topics:

Reference: https://www.cwnp.com/uploads/cwsp-206-objectives-2019.pdf

CWSP-206 Topics in Detail

The topics targeting CWSP-206 exam are further broken down into varying sections, as included below:

• Vulnerabilities, Threats, & Attacks

  The topic focuses on two critical sections. The first one includes identifying potential vulnerabilities & threats to enable the determination of how they impact the WLAN as well as supporting structures, and then verifying, mitigating, and remediating them. The second tackles describing and performing risk analysis in addition to procedures for risk mitigation. Particularly, this area exposes asset management, risk ratings, developing plans for risk management aimed at WLANs, and calculations for loss expectancy.

• Managing Security Lifecycle

  This final subject touches on five main portions. The first one is understanding and implementing management within the security lifecycle in areas of identifying, assessing, protecting, and monitoring. The second part details the usage of efficient procedures of change management that include documentation, approval, as well as notifications. The third portion delves into the usage of monitoring solution information for observation of loads in addition to forecasting future needs for compliance with the policy for security. In the fourth area, one will be considering the implementation of proper maintenance procedures that include license management, configuration management, and software or code upgrades. The fifth thing to do is to execute effective procedures for auditing for the performance of audits, results analysis, and report generation.

• WLAN Security Design & Architecture

  To start is the aspect of selecting the proper security solution aimed at a specific implementation as well as ensuring its installation and configuration based on policy requirements. To cover under it is the selection and implementation of proper authentication, encryption, and monitoring solutions for wireless, and more. Next is recommending properly wired configurations for security meant for supporting the WLAN. This looks into physical port security in switches for Ethernet, network segmentation, solutions for layered security, and VLANs, tunnelling protocols & connections, firewalls, and more. The succeeding domain concerns executing authentication in addition to security services. This touches on RBAC, Certificate Authorities (CAs), client onboarding, BYOD & MDM, and AAA servers. Exam-takers will also be considering the matter of securing public access and/or open networks. This revolves around guest access, captive portals, peer-to-peer connectivity, and Hotspot 2.0/Passpoint. The final subject detailed in this part concerns deploying preventative measures needed for typical vulnerabilities related to wireless architecture devices as well as avoiding weak solutions for security. It digs into weak and default passwords, misconfiguration, firmware or software updates, older protocols for SNMP like SNMPv1 as well as SNMPv2, HTTP-based interface access for administration, and Telnet-based interface access for administration.

• Security Policy

  The security policy subject starts with requirements for WLAN security. Highlighted are issues on evaluating and incorporating businesses, technical as well as applicable policies for regulation, involving the right stakeholders, reviewing client gadgets and applications, and reviewing devices for WLAN infrastructure. It's followed by developing policies for WLAN security. Tasks captured here focus on translating security needs to high-level statements of policy and writing policies that conform to common practices, which include defining enforcements as well as constraints specifications. Also, ensuring proper policy approval along with support and implementing the lifecycle management of security policy will be explained in this area. The final matter is centered on ensuring the administration of proper training for all concerned stakeholders regarding security awareness and security policies.

Target Audience

Test CWSP-206 aims at anyone with intermediate-level skills in wireless technology. The wish of the would-be candidates is to prove themselves worthy of the CWSP certification.