CWNP Wireless Security Professional (CWSP) (CWSP-207) Free Practice Test

Question 1

Wireless Intrusion Prevention Systems (WIPS) provide what network security services? (Choose 2)

A. Analysis and reporting of AP CPU utilization

B. Configuration distribution for autonomous APs

C. Policy enforcement and compliance management

D. Application-layer traffic inspection

E. Wireless vulnerability assessment

Correct Answer: C,E

Question 2

Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN.
Before creating the WLAN security policy, what should you ensure you possess?

A. Awareness of the exact vendor devices being installed

B. End-user training manuals for the policies to be created

C. Security policy generation software

D. Management support for the process

Correct Answer: D

Question 3

Given: WLAN protocol analyzers can read and record many wireless frame parameters.
What parameter is needed to physically locate rogue APs with a protocol analyzer?

A. Signal strength

B. IP Address

C. Noise floor

D. SSID

E. RSN IE

F. BSSID

Correct Answer: A

Question 4

What preventative measures are performed by a WIPS against intrusions?

A. Uses SNMP to disable the switch port to which rogue APs connect

B. Evil twin attack against a rogue AP

C. EAPoL Reject frame flood against a rogue AP

D. Deauthentication attack against a classified neighbor AP

E. ASLEAP attack against a rogue AP

Correct Answer: A

Question 5

Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

A. Allow simultaneous support for multiple EAP types on a single access point.

B. Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.

C. Provide two or more user groups connected to the same SSID with different levels of network privileges.

D. Allow access to specific files and applications based on the user's WMM access category.

Correct Answer: C

Question 6

What statement is true regarding the nonces (ANonce and SNonce) used in the IEEE 802.11 4 Way Handshake?

A. Nonces are sent in EAPoL frames to indicate to the receiver that the sending station has installed and validated the encryption keys.

B. The nonces are created by combining the MAC addresses of the Supplicant, Authenticator, and Authentication Server into a mixing algorithm.

C. The Supplicant uses the SNonce to derive its unique PTK and the Authenticator uses the ANonce to derive its unique PTK, but the nonces are not shared.

D. Both nonces are used by the Supplicant and Authenticator in the derivation of a single PTK.

Correct Answer: D

Question 7

Given: Your organization is using EAP as an authentication framework with a specific type that meets the requirements of your corporate policies.
Which one of the following statements is true related to this implementation?

A. The client STAs may communicate over the controlled port in order to authenticate as soon as the Open System authentication completes.

B. The client STAs may communicate over the uncontrolled port in order to authenticate as soon as Open System authentication completes.

C. The client STAs must use a different, but complementary, EAP type than the AP STAs.

D. The client will be the authenticator in this scenario.

Correct Answer: B

Question 8

Given: A WLAN protocol analyzer trace reveals the following sequence of frames (excluding the ACK frames):
1) 802.11 Probe Req and 802.11 Probe Rsp
2) 802.11 Auth and then another 802.11 Auth
3) 802.11 Assoc Req and 802.11 Assoc Rsp
4) EAPOL-KEY
5) EAPOL-KEY
6) EAPOL-KEY
7) EAPOL-KEY
What security mechanism is being used on the WLAN?

A. 802.1X/LEAP

B. WEP-128

C. WPA-Enterprise

D. EAP-TLS

E. WPA2-Personal

Correct Answer: E

Question 9

When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used by the WNMS to issue configuration changes to APs?

A. PPTP

B. 802.1X/EAP

C. IPSec/ESP

D. TFTP

E. SNMPv3

Correct Answer: E

Welcome to TestSimulate

CWNP Wireless Security Professional (CWSP) (CWSP-207) Free Practice Test