Certified Wireless Security Professional (CWSP)

Question 1

In what Wi-Fi Alliance security certification is SAE implemented?

A. WPA3

B. WPA2

C. WPA

D. 802.1X/PEAP

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

What type of WLAN attack is prevented with the use of a per-MPDU TKIP sequence counter (TSC)?

A. Session hijacking

B. Weak-IV

C. Forgery

D. Bit-flipping

E. Replay

Correct Answer: E

Question 3

You must locate non-compliant 802.11 devices. Which one of the following tools will you use and why?

A. A spectrum analyzer, because it can show the energy footprint of a device using WPA differently from a device using WPA2.

B. A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance

C. A spectrum analyzer, because it can decode the PHY preamble of a non-compliant device.

D. A protocol analyzer, because it can be used to view the spectrum energy of non-compliant 802.11 devices, which is always different from compliant devices.

Correct Answer: B

Question 4

Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States.
802.1X/EAP is ABC's preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources. What security best practices should be followed in this deployment scenario?

A. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.

B. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.

C. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

D. RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.

Correct Answer: B

Question 5

A single AP is configured with three separate WLAN profiles, as follows:
1. SSID: ABCData - BSSID: 00:11:22:00:1F:C3 - VLAN 10 - Security:
PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 3 current clients
2. SSID: ABCVoice - BSSID: 00:11:22:00:1F:C4 - VLAN 60 - Security:
WPA2-Personal with AES-CCMP - 2 current clients
3. SSID: Guest - BSSID: 00:11:22:00:1F:C5 - VLAN 90 - Security: Open
with captive portal authentication - 3 current clients
Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.
How many unique GTKs and PTKs are currently in place in this scenario?

A. 2 GTKs ?8 PTKs

B. 2 GTKs ?5 PTKs

C. 1 GTK ?8 PTKs

D. 3 GTKs ?8 PTKs

Correct Answer: B

Question 6

Access control for stations used within an IEEE 802.11 WLAN can be achieved by implementing what technology?

A. Firewall technology

B. TKIP technology

C. WMM technology

D. CCMP technology

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Given: During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?

A. 4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.

B. The username can be looked up in a dictionary file that lists common username/password combinations.

C. The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

D. The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.

Correct Answer: C

Question 8

What is the primary function of a wireless IDS/IPS system?

A. To detect and prevent unauthorized access or attacks on the wireless network

B. To manage wireless network IP address allocation

C. To encrypt wireless traffic between access points

D. To create dynamic VLAN assignments

Correct Answer: A

CWNP Certified Wireless Security Professional (CWSP) - CWSP-208 Exam Practice Test

Latest Update

Useful Links

Contact Us