CWSP-205 by CWNP Actual Free Exam Questions And Answers

Question 1

What WLAN client device behavior is exploited by an attacker during a hijacking attack?

A. After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.

B. When the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.

C. When the RF signal between a client and an access point is disrupted for more than a
few seconds, the client device will attempt to associate to an access point with better signal quality.

D. As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.

E. Client drivers scan for and connect to access points in the 2.4 GHz band before scanning the 5 GHz band.

Discussion 0

Correct Answer: C Vote an answer

Question 2

What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

A. Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.

B. Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.

C. The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.

D. Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

Discussion 0

Correct Answer: D Vote an answer

Question 3

Given: You are using WEP as an encryption solution. You are using VLANs for network segregation.
Why can you not establish an RSNA?

A. RSNA connections require TKIP or CCMP.

B. RSNA connections require CCMP and do not support TKIP or WEP.

C. RSNA connections require BIP and do not support TKIP, CCMP or WEP.

D. RSNA connections do not work in conjunction with VLANs.

Discussion 0

Correct Answer: A Vote an answer

Question 4

You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity. For what is the described utility used? (Choose 3)

A. Generating secret keys for RADIUS servers and WLAN infrastructure devices

B. Generating dynamic session keys used for IPSec VPNs

C. Generating PMKs that can be imported into 802.11 RSN-compatible devices

D. Generating passwords for WLAN infrastructure equipment logins

E. Generating passphrases for WLAN systems secured with WPA2-Personal

Discussion 0

Correct Answer: A,D,E Vote an answer

Question 5

You have been recently hired as the wireless network administrator for an organization spread across seven locations. They have deployed more than 100 APs, but they have not been managed in either an automated or manual process for more than 18 months. Given this length of time, what is one of the first things you should evaluate from a security perspective?

A. The firmware revision

B. The VLANs in use

C. The channel widths configured

D. The channels in use

Discussion 0

Correct Answer: A Vote an answer

Question 6

When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

A. X.509 certificates

B. Server credentials

C. User credentials

D. RADIUS shared secret

Discussion 0

Correct Answer: C Vote an answer

Question 7

Your organization required compliance reporting and forensics features in relation to the 802.11ac WLAN they have recently installed. These features are not built into the management system provided by the WLAN vendor. The existing WLAN is managed through a centralized management console provided by the AP vendor with distributed APs and multiple WLAN controllers configured through this console.
What kind of system should be installed to provide the required compliance reporting and forensics features?

A. WIPS integrated

B. WNMS

C. WIPS overlay

D. Cloud management platform

Discussion 0

Correct Answer: C Vote an answer

CWNP Certified Wireless Security Professional (CWSP) - CWSP-205 Exam Practice Test

Contact Us

Useful Links

Latest Updated