CWSP Certified Wireless Security Professional (CWSP-206) Free Practice Test

Question 1

Which of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

A. It is not a valid EAP type.

B. It does not support a RADIUS server.

C. It does not support the outer identity.

D. It does not support mutual authentication.

Correct Answer: D

Question 2

Which of the following are the security measures that are needed to maintain the security of wireless LAN?
Each correct answer represents a complete solution. Choose all that apply.

A. Firewalls

B. WIPS

C. WIDS

D. WLAN controller

Correct Answer: A,B,C

Question 3

Which of the following are legacy authentication protocols used within the stronger EAP authentication protocols? Each correct answer represents a complete solution. Choose all that apply.

A. PPTP

B. PAP

C. CHAP

D. MS-CHAP

Correct Answer: B,C,D

Question 4

Which of the following keys are used by the public key infrastructure (PKI)? Each correct answer represents a complete solution. Choose all that apply.

A. Public Key

B. Private Key

C. Pairwise Transient Key

D. Group Temporal Key

Correct Answer: A,B

Question 5

A network security auditor is preparing to perform a comprehensive assessment of an 802.11ac network's security. What task should be performed at the beginning of the audit to maximize the auditor's ability to expose network vulnerabilities?

A. Identify the skill level of the wireless network security administrator(s).

B. Identify the wireless security solution(s) currently in use.

C. Identify the manufacturer of the wireless infrastructure hardware.

D. Identify the manufacturer of the wireless intrusion prevention system.

E. Identify the IP subnet information for each network segment.

Correct Answer: B

Question 6

XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication. XYZ would like to support fast secure roaming for the phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming. What portable solution would be recommended for XYZ to troubleshoot roaming problems?

A. Spectrum analyzer software installed on a laptop computer.

B. WIPS sensor software installed on a laptop computer.

C. An autonomous AP mounted on a mobile cart and configured to operate in monitor mode.

D. Laptop-based protocol analyzer with multiple 802.11n adapters.

Correct Answer: D

Question 7

ABC Company is an Internet Service Provider with thousands of customers. ABC's customers are given login credentials for network access when they become a customer. ABC uses an LDAP server as the central user credential database. ABC is extending their service to existing customers in some public access areas and would like to use their existing database for authentication. How can ABC Company use their existing user database for wireless user authentication as they implement a large-scale WPA2-Enterprise WLAN security solution?

A. Implement a RADIUS server and query user authentication requests through the LDAP server.

B. Import all users from the LDAP server into a RADIUS server with an LDAP-to-RADIUS conversion tool.

C. Mirror the LDAP server to a RADIUS database within a WLAN controller and perform daily backups to synchronize the user databases.

D. Implement an X.509 compliant Certificate Authority and enable SSL queries on the LDAP server.

Correct Answer: A

Question 8

You work as a Network Administrator for Blue Well Inc. The company has a Windows Server
2008 domain based network. All client computers on the network run Windows Vista Ultimate.
Andy, a Finance Manager, uses Windows Mail to download his e-mails to his inbox. He complains that every now and then he gets mails asking for revealing personal or financial information. He wants that such mails are not shown to him.
Which of the following steps will you take to accomplish the task?

A. Remove domain names of such emails from the Safe Sender's list.

B. Configure phishing filter in Windows Mail. Configure it to move such mails to the Junk Mail folder.

C. Configure phishing filter in Internet Explorer 7.0. Configure it to filter all phishing mails.

D. Add domain names of such emails in the Block Sender's list.

Correct Answer: B

Question 9

Which of the following would be the most help against Denial of Service (DOS) attacks?

A. Network surveys.

B. Honey pot

C. Stateful Packet Inspection (SPI) firewall

D. Packet filtering firewall

Correct Answer: C

Welcome to TestSimulate

CWNP CWSP Certified Wireless Security Professional (CWSP-206) Free Practice Test