CWSP-206 CWNP Exam Questions and Free Practice Test

Question 7

You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data. What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

A. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptop

B. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.

C. Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.

D. Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.

E. All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.

F. The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.

Correct Answer:A

Question 8

After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify the security threats?

A. Separate security profiles must be defined for network operation in different regulatory domains.

B. WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.

C. Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.

D. Authorized PEAP usernames must be added to the WIPS server’s user database.

Correct Answer:B

Question 9

What preventative measures are performed by a WIPS against intrusions?

A. Uses SNMP to disable the switch port to which rogue APs connect.

B. Evil twin attack against a rogue AP.

C. EAPoL Reject frame flood against a rogue AP.

D. Deauthentication attack against a classified neighbor AP.

E. ASLEAP attack against a rogue AP.

Correct Answer:A

Question 10

You are the WLAN administrator in your organization and you are required to monitor the network and ensure all active WLANs are providing RSNs. You have a laptop protocol analyzer configured. In what frame could you see the existence or non-existence of proper RSN configuration parameters for each BSS through the RSN IE?

A. CTS

B. Beacon

C. RTS

D. Data frames

E. Probe request

Correct Answer:B

Question 11

You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet. What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations? (Choose the single best answer.)

A. Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.

B. Use internal antennas.

C. Use external antennas.

D. Power the APs using PoE.

Correct Answer:A

Question 12

A large enterprise is designing a secure, scalable, and manageable 802.11n WLAN that will support thousands of users. The enterprise will support both 802.1X/EAP-TTLS and PEAPv0/MSCHAPv2. Currently, the company is upgrading network servers as well and will replace their existing Microsoft IAS implementation with Microsoft NPS, querying Active Directory for user authentication. For this organization, as they update their WLAN infrastructure, what WLAN controller feature will likely be least valuable?

A. SNMPv3 support

B. 802.1Q VLAN trunking

C. Internal RADIUS server

D. WIPS support and integration

E. WPA2-Enterprise authentication/encryption

Correct Answer:C

START CWSP-206 EXAM