CWNP Certified Wireless Security Professional (CWSP) - PW0-204 Exam Practice Test

A. Procedural access control

B. Environmental design

C. Intrusion detection system

D. Video monitor

A. They allow the participating STAs to avoid sending unicast encryption keys acrossthe wireless medium

B. They are used to pad message 1 and message 2 so each frame contains the same number of bytes.

C. They are added together and used as the GMK, from which the GTK is derived.

D. The IEEE 802.11 standard requires that all crypto graphic frames contain a nonce for security purposes.

E. There are values used in the derivation of the pairwise Transient key.

A. Password complexity should be maximized so that the weak IV attacks are prevented.

B. Password should include a combination of upper and lower case latter, numbers, and special characters.

C. Certificate should always by recommended instead of passwords for 802.11 client authentication.

D. MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2=PSK passphrase.

E. Password creation process should be defined to maximize the strength of PSK based authentication.

A. Wi-Fi Protected Access version 2 (WPA2)

B. Wireless Intrusion Prevention System (WIPS)

C. Personal firewall software on client devices

D. WLAN protocol analysis software on one laptop

E. Peer-to-peer data blocking in the AP

A. Provide differing levels of management access to a WLAN controller based on the user account.

B. Allow simultaneous support of multiple EAP types on a single Access point.

C. Allows access to specific files and applications based on the user's WMM AC.

D. Allows one user group to access an internet gateway while denying internet access gateway to another group

E. Provide admission control to VoWiFi clients on selected access points.

A. ESP-SHA1-HMAC

B. SSH2/BLOWFISH-CBC

C. 802.1X/EAP-TLS

D. AH-MD5-HMAC

E. PPTP/MPPE-128

A. IPSec

B. L2TP

C. SSL

D. TLS

A. TKIP

B. CCMP

C. RSA

D. RC4

A. Lightweight AP

B. Autonomous AP

C. Rouge AP

D. LWAPP

A. Pairwise Transient Key

B. Public Key

C. Group Temporal Key

D. Private Key

A. Encapsulation

B. Authentication

C. Encryption

D. Data integrity

A. EAP-TTLS provides support for legacy client authentication methods, and EAP-TLS requires certificates forclient-side authentication

B. EAP-TLS uses a RADIUS server for authentication, and EAP-TTLS can only use Kerberos

C. EAP-TTLS provides strong client authentication and EAP-TLS does not

D. EAP-TLS is an authentication protocol, and EAP-TTLS is an encryption type

E. EAP-TLS uses IP-based authentication, and EAP-TTLS uses MAC-based authentication

A. 802.11 introduces a mechanism to Encrypt MAC headers in management and control frames, which have traditionally have been used by WIPS to detect network threats such as hijacking attacks and MAC spoofing

B. 802.11w introduces new mechanisms by which unassociated clients can refuse Deauthentication frames that can not be rejected by APs. This introduces new security concerns for WIPS containing Deauthentication attacks

C. 802.11w introduces data integrity protection for some management and action frames, which may limits the methods used by WIPS to disconnect, and mitigate the impact of, rogue AP or client communications

D. 802.11w inadvertently exposes new methods for attacks to exploit TKIP countermeasure using spoofed management frames of legitimate stations. WIPS solutions are in capable of preventing this type of attack

A. Verification that administrative passwords are unique to each infrastructure device

B. Enabling encryption to prevent MAC addresses from being sent in clear text

C. Security policy details should be safeguarded from non IT employees to prevent vulnerability exposure

D. End user training for password selection and acceptable network use

E. Social engineering recognition and mitigation technique.

A. Once guest users are associated to the WLAN, they can capture 802.11 frames from the corporate VLANs.

B. Peer-to-peer attacks between the guest users can not be prevented without protocol filtering.

C. Guest users can reconfigure APs in the guest VKAN unless unsecure network management protocols (e.g. Telnet, HTTP) are filtered.

D. Intruders can send spam to the internet through the guest VLAN.

E. Unauthorized users can perform internet based network attacks through the WLAN.