Question 1

Given: ABC Company is deploying an IEEE 802.11-compliant wireless security solution using 802.1X/EAP authentication. According to company policy, the security solution must prevent an eavesdropper from decrypting data frames traversing a wireless connection. What security characteristics and/or components play a role in preventing data decryption? (Choose 2)

Options :

A : Multi-factor authentication

B : 4-Way Handshake

C : PLCP Cyclic Redundancy Check (CRC)

D : Encrypted Passphrase Protocol (EPP)

E : Integrity Check Value (ICV)

F : Group Temporal Keys

Answer: B,F

Question 2

As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods. When writing the 802.11 security policy, what password-related items should be addressed?

Options :

A :

MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.

B : Password complexity should be maximized so that weak WEP IV attacks are prevented.

C :

Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.

D : Certificates should always be recommended instead of passwords for 802.11 client authentication.

E : EAP-TLS must be implemented in such scenarios.

Answer: C

Question 3

Given: ABC Company has recently installed a WLAN controller and configured it to support WPA2-Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing, Sales, and Engineering). How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

Options :

A :

The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

B :

The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

C :

The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

D :

The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

Answer: B

Question 4

What protocols allow a network administrator to securely manage the configuration of WLAN controllers and access points? (Choose 2)

Options :

A : SNMPv1

B : HTTPS

C : Telnet

D : TFTP

E : FTP

F : SSHv2

Answer: B,F

Question 5

Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)

Options :

A : Rogue APs

B : DoS

C : Eavesdropping

D : Social engineering

Answer: C,D

Higher Test Marks with Free Online CWSP-207 Exam Practice

Buying Options: