Online CWSP-206 Practice TestMore CWNP Products >

Free CWNP CWSP-206 Exam Dumps Questions

CWNP CWSP-206: CWSP Certified Wireless Security Professional

- Get instant access to CWSP-206 practice exam questions

- Get ready to pass the CWSP Certified Wireless Security Professional exam right now using our CWNP CWSP-206 exam package, which includes CWNP CWSP-206 practice test plus an CWNP CWSP-206 Exam Simulator.

- The best online CWSP-206 exam study material and preparation tool is here.

4.5

(4050 ratings)

Question 1

As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods. When writing the 802.11 security policy, what password-related items should be addressed?

A. Certificates should always be recommended instead of passwords for 802.11 client authentication.

B. Password complexity should be maximized so that weak WEP IV attacks are prevented.

C. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.

D. EAP-TLS must be implemented in such scenarios.

E. MS-CHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.

Correct Answer:C

Question 2

What security vulnerability may result from a lack of staging, change management, and installation procedures for WLAN infrastructure equipment?

A. The WLAN system may be open to RF Denial-of-Service attacks.

B. Authentication cracking of 64-bit Hex WPA-Personal PSK.

C. AES-CCMP encryption keys may be decrypted.

D. WIPS may not classify authorized, rogue, and neighbor APs accurately.

Correct Answer:D

Question 3

You must implement 7 APs for a branch office location in your organizations. All APs will be autonomous and provide the same two SSIDs (CORP1879 and Guest).
Because each AP is managed directly through a web-based interface, what must be changed on every AP before enabling the WLANs to ensure proper staging procedures are followed?

A. Output power

B. Fragmentation threshold

C. Administrative password

D. Cell radius

Correct Answer:C

Question 4

ABC Company has recently installed a WLAN controller and configured it to support WPA2-Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing, Sales, and Engineering). How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

A. The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

B. The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

C. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

D. The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

Correct Answer:C

Question 5

For a WIPS system to identify the location of a rogue WLAN device using location pattering (RF fingerprinting), what must be done as part of the WIPS installation?

A. A location chipset (GPS) must be installed with it.

B. At least six antennas must be installed in each sector.

C. The RF environment must be sampled during an RF calibration process.

D. All WIPS sensors must be installed as dual-purpose (AP/sensor) devices.

Correct Answer:C

Question 6

ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States. 802.1X/EAP is ABC’s preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources. What security best practices should be followed in this deployment scenario?

A. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.

B. RADIUS services should be provided at branch offices so that authentication server and suppliant credentials are not sent over the Internet.

C. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.

D. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

Correct Answer:C

START CWSP-206 EXAM