CWSP-205 Online Practice Questions and Answers

You are configuring seven APs to prevent common security attacks. The APs are to be installed in a small business and to reduce costs, the company decided to install all consumer-grade wireless routers. The wireless routers will connect to a switch, which connects directly to the Internet connection providing 50 Mbps of Internet bandwidth that will be shared among 53 wireless clients and 17 wired clients.

To ensure the wireless network is as secure as possible from common attacks, what security measure can you implement given only the hardware referenced?

A. WPA-Enterprise

B. 802.1X/EAP-PEAP

C. WPA2-Enterprise

D. WPA2-Personal

What is a primary criteria for a network to qualify as a Robust Security Network (RSN)?

A. Token cards must be used for authentication.

B. Dynamic WEP-104 encryption must be enabled.

C. WEP may not be used for encryption.

D. WPA-Personal must be supported for authentication and encryption.

E. WLAN controllers and APs must not support SSHv1.

You perform a protocol capture using Wireshark and a compatible 802.11 adapter in Linux. When viewing the capture, you see an auth req frame and an auth rsp frame. Then you see an assoc req frame and an assoc rsp frame. Shortly after, you see DHCP communications and then ISAKMP protocol packets. What security solution is represented?

A. 802.1X/EAP-TTLS

B. Open 802.11 authentication with IPSec

C. 802.1X/PEAPv0/MS-CHAPv2

D. WPA2-Personal with AES-CCMP

E. EAP-MD5

In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

A. In home networks in which file and printer sharing is enabled

B. At public hot-spots in which many clients use diverse applications

C. In corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities

D. In university environments using multicast video training sourced from professor's laptops

You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4-way handshake.

Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)

A. STA1 and STA2 are using different cipher suites.

B. STA2 has retransmissions of EAP frames.

C. STA1 is a reassociation and STA2 is an initial association.

D. STA1 is a TSN, and STA2 is an RSN.

E. STA1 and STA2 are using different EAP types.

When implementing a WPA2-Enterprise security solution, what protocol must the selected RADIUS server support?

A. LWAPP, GRE, or CAPWAP

B. IPSec/ESP

C. EAP

D. CCMP and TKIP

E. LDAP

When TKIP is selected as the pairwise cipher suite, what frame types may be protected with data confidentiality? (Choose 2)

A. Robust broadcast management

B. Robust unicast management

C. Control

D. Data

E. ACK

F. QoS Data

Given: ABC Company is an Internet Service Provider with thousands of customers. ABC's customers are given login credentials for network access when they become a customer. ABC uses an LDAP server as the central user credential database. ABC is extending their service to existing customers in some public access areas and would like to use their existing database for authentication.

How can ABC Company use their existing user database for wireless user authentication as they implement a large-scale WPA2-Enterprise WLAN security solution?

A. Import all users from the LDAP server into a RADIUS server with an LDAP-to-RADIUS conversion tool.

B. Implement an X.509 compliant Certificate Authority and enable SSL queries on the LDAP server.

C. Mirror the LDAP server to a RADIUS database within a WLAN controller and perform daily backups to synchronize the user databases.

D. Implement a RADIUS server and query user authentication requests through the LDAP server.

Given: ABC Company has recently installed a WLAN controller and configured it to support WPA2Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing, Sales, and Engineering).

How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

A. The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

B. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

C. The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

D. The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

Given: WLAN protocol analyzers can read and record many wireless frame parameters.

What parameter is needed to physically locate rogue APs with a protocol analyzer?

A. SSID

B. IP Address

C. BSSID

D. Signal strength

E. RSN IE

F. Noise floor