Question 1

What is a primary criteria for a network to qualify as a Robust Security Network (RSN)?

Options :

A : Token cards must be used for authentication.

B : Dynamic WEP-104 encryption must be enabled.

C : WEP may not be used for encryption.

D : WPA-Personal must be supported for authentication and encryption.

E : WLAN controllers and APs must not support SSHv1.

Answer: C

Question 2

As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods. When writing the 802.11 security policy, what password-related items should be addressed?

Options :

A :

MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.

B : Password complexity should be maximized so that weak WEP IV attacks are prevented.

C :

Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.

D : Certificates should always be recommended instead of passwords for 802.11 client authentication.

E : EAP-TLS must be implemented in such scenarios.

Answer: C

Question 3

Given: ABC Company is an Internet Service Provider with thousands of customers. ABC’s customers are given login credentials for network access when they become a customer. ABC uses an LDAP server as the central user credential database. ABC is extending their service toexisting customers in some public access areas and would like to use their existing database for authentication. How can ABC Company use their existing user database for wireless user authentication as they implement a large-scale WPA2-Enterprise WLAN security solution?

Options :

A :

Import all users from the LDAP server into a RADIUS server with an LDAP-to-RADIUS conversion tool.

B : Implement an X.509 compliant Certificate Authority and enable SSL queries on the LDAP server.

C :

Mirror the LDAP server to a RADIUS database within a WLAN controller and perform daily backups to synchronize the user databases.

D : Implement a RADIUS server and query user authentication requests through the LDAP server.

Answer: D

Question 4

Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)

Options :

A : Rogue APs

B : DoS

C : Eavesdropping

D : Social engineering

Answer: C,D

Question 5

What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

Options :

A :

The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.

B : The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.

C : The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.

D :

The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.

Answer: B

Higher Test Marks with Free Online CWSP-207 Exam Practice

Buying Options: