[Jul 25, 2024] CWSP-207 PDF Questions and Testing Engine With 122 Questions [Q71-Q89]

25Jul 2024 by admin No Comments

4.3/5 - (3 votes)

[Jul 25, 2024] CWSP-207 PDF Questions and Testing Engine With 122 Questions

Updated Exam Engine for CWSP-207 Exam Free Demo & 365 Day Updates

Q71. When used as part of a WLAN authentication solution, what is the role of LDAP?

A data retrieval protocol used by an authentication service such as RADIUS

An IEEE X.500 standard compliant database that participates in the 802.1X port-based access control process

A SQL compliant authentication service capable of dynamic key generation and distribution

A role-based access control protocol for filtering data to/from authenticated stations.

An Authentication Server (AS) that communicates directly with, and provides authentication for, the Supplicant.

Q72. Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11. What kind of troubleshooting are you likely performing with such a tool?

Wireless adapter failure analysis.

Interference source location.

Fast secure roaming problems.

Narrowband DoS attack detection.

Q73. Given: XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication. XYZ would like to support fast secure roaming for the phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming.
What portable solution would be recommended for XYZ to troubleshoot roaming problems?

WIPS sensor software installed on a laptop computer

Spectrum analyzer software installed on a laptop computer

An autonomous AP mounted on a mobile cart and configured to operate in monitor mode

Laptop-based protocol analyzer with multiple 802.11n adapters

Q74. What security benefits are provided by endpoint security solution software? (Choose 3)

Can prevent connections to networks with security settings that do not conform to company policy

Can collect statistics about a user’s network use and monitor network threats while they are connected

Can restrict client connections to networks with specific SSIDs and encryption types

Can be used to monitor for and prevent network attacks by nearby rogue clients or APs

Q75. Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK. The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.

If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user’s passphrase. The PMK is then used during the 4-way handshake to create data encryption keys.

After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK, is derived from the AAA key and is hashed with the PMK to create the PTK and GTK.

The PMK is generated from a successful mutual EAP authentication. When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake.

Q76. Given: During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text.
From a security perspective, why is this significant?

The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.

The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.

The username can be looked up in a dictionary file that lists common username/password combinations.

Q77. In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

In home networks in which file and printer sharing is enabled

At public hot-spots in which many clients use diverse applications

In corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities

In university environments using multicast video training sourced from professor’s laptops

Q78. Given: Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a dedicated server named SRV21. One example client is a MacBook Pro with 8 GB RAM.
What device functions as the 802.1X/EAP Authenticator?

SRV21

WLAN Controller/AP

MacBook Pro

RADIUS server

Q79. As a part of a large organization’s security policy, how should a wireless security professional address the problem of rogue access points?

Use a WPA2-Enterprise compliant security solution with strong mutual authentication and encryption for network access of corporate devices.

Hide the SSID of all legitimate APs on the network so that intruders cannot copy this parameter on rogue APs.

Conduct thorough manual facility scans with spectrum analyzers to detect rogue AP RF signatures.

A trained employee should install and configure a WIPS for rogue detection and response measures.

Enable port security on Ethernet switch ports with a maximum of only 3 MAC addresses on each port.

Q80. Given: You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet.
What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations?
(Choose the single best answer.)

User external antennas.

Use internal antennas.

Power the APs using PoE.

Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.

Q81. ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism.
As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.

The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next.

STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.

The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.

Q82. What software and hardware tools are used together to hijack a wireless station from the authorized wireless network onto an unauthorized wireless network? (Choose 2)

RF jamming device and a wireless radio card

A low-gain patch antenna and terminal emulation software

A wireless workgroup bridge and a protocol analyzer

DHCP server software and access point software

MAC spoofing software and MAC DoS software

Q83. What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

MAC Spoofing

Eavesdropping

Hot-spotter

Soft AP

Deauthentication flood

EAP flood

Q84. What EAP type supports using MS-CHAPv2, EAP-GTC or EAP-TLS for wireless client authentication?

H-REAP

EAP-GTC

EAP-TTLS

PEAP

LEAP

Q85. Wireless Intrusion Prevention Systems (WIPS) provide what network security services? (Choose 2)

Configuration distribution for autonomous APs

Wireless vulnerability assessment

Application-layer traffic inspection

Analysis and reporting of AP CPU utilization

Policy enforcement and compliance management

Q86. A single AP is configured with three separate WLAN profiles, as follows:
1. SSID: ABCData – BSSID: 00:11:22:00:1F:C3 – VLAN 10 – Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP – 3 current clients
2. SSID: ABCVoice – BSSID: 00:11:22:00:1F:C4 – VLAN 60 – Security: WPA2-Personal with AES-CCMP
– 2 current clients
3. SSID: Guest – BSSID: 00:11:22:00:1F:C5 – VLAN 90 – Security: Open with captive portal authentication –
3 current clients
Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.
How many unique GTKs and PTKs are currently in place in this scenario?

1 GTK – 8 PTKs

2 GTKs – 5 PTKs

2 GTKs – 8 PTKs

3 GTKs – 8 PTKs

Q87. You are configuring seven APs to prevent common security attacks. The APs are to be installed in a small business and to reduce costs, the company decided to install all consumer-grade wireless routers. The wireless routers will connect to a switch, which connects directly to the Internet connection providing 50 Mbps of Internet bandwidth that will be shared among 53 wireless clients and 17 wired clients.
To ensure the wireless network is as secure as possible from common attacks, what security measure can you implement given only the hardware referenced?

WPA-Enterprise

802.1X/EAP-PEAP

WPA2-Enterprise

WPA2-Personal

Q88. What preventative measures are performed by a WIPS against intrusions?

EAPoL Reject frame flood against a rogue AP

Evil twin attack against a rogue AP

Deauthentication attack against a classified neighbor AP

ASLEAP attack against a rogue AP

Uses SNMP to disable the switch port to which rogue APs connect

Q89. Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.

Allow access to specific files and applications based on the user’s WMM access category.

Provide two or more user groups connected to the same SSID with different levels of network privileges.

Allow simultaneous support for multiple EAP types on a single access point.

Exam Passing Guarantee CWSP-207 Exam with Accurate Quastions: https://www.practicematerial.com/CWSP-207-exam-materials.html

Leave a Reply Cancel reply