CWSP-208 by CWNP Actual Free Exam Q&As

Question 1

While performing a manual scan of your environment using a spectrum analyzer on a laptop computer, you notice a signal in the real time FFT view. The signal is characterized by having peak power centered on channel 11 with an approximate width of 20 MHz at its peak. The signal widens to approximately 40 MHz after it has weakened by about 30 dB. What kind of signal is displayed in the spectrum analyzer?

A. A frequency hopping device is being used as a signal jammer in 5 GHz B. An 802.11a AP operating normally in 5 GHz C. A low-power wideband RF attack is in progress in 2.4 GHz, causing significant 802.11 interference D. An 802.11g AP operating normally in 2.4 GHz

Discussion 0

Correct Answer: D Vote an answer

Question 2

For a WIPS system to identify the location of a rogue WLAN device using location patterning (RF fingerprinting), what must be done as part of the WIPS installation?

A. All WIPS sensors must be installed as dual-purpose (AP/sensor) devices. B. The RF environment must be sampled during an RF calibration process. C. At least six antennas must be installed in each sensor. D. A location chipset (GPS) must be installed with it.

Discussion 0

Correct Answer: B Vote an answer

Question 3

Given: You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames):
1) 802.11 Probe Request and 802.11 Probe Response
2) 802.11 Auth and another 802.11 Auth
2) 802.11 Assoc Req and 802.11 Assoc Rsp
4) EAPOL-Start
5) EAP Request and EAP Response
6) EAP Request and EAP Response
7) EAP Request and EAP Response
8) EAP Request and EAP Response
9) EAP Request and EAP Response
10) EAP Success
19) EAPOL-Key (4 frames in a row)
What are you seeing in the capture file? (Choose 4)

A. WPA2-Personal authentication B. Wi-Fi Protected Setup with PIN C. WPA2-Enterprise authentication D. Active Scanning E. 802.1X with Dynamic WEP F. 4-Way Handshake G. 802.11 Open System authentication

Discussion 0

Correct Answer: C,D,F,G Vote an answer

Question 4

Given: WLAN attacks are typically conducted by hackers to exploit a specific vulnerability within a network. What statement correctly pairs the type of WLAN attack with the exploited vulnerability?
(Choose 3)

A. RF DoS attacks prevent successful wireless communication on a specific frequency or frequency range. B. Hijacking attacks interrupt a user's legitimate connection and introduce a new connection with an evil twin AP. C. Social engineering attacks are performed to collect sensitive information from unsuspecting users D. Zero-day attacks are always authentication or encryption cracking attacks. E. Management interface exploit attacks are attacks that use social engineering to gain credentials from managers. F. Association flood attacks are Layer 3 DoS attacks performed against authenticated client stations

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 5

Given: ABC Company is an Internet Service Provider with thousands of customers. ABC's customers are given login credentials for network access when they become a customer. ABC uses an LDAP server as the central user credential database. ABC is extending their service to existing customers in some public access areas and would like to use their existing database for authentication. How can ABC Company use their existing user database for wireless user authentication as they implement a large-scale WPA2-Enterprise WLAN security solution?

A. Implement an X.509 compliant Certificate Authority and enable SSL queries on the LDAP server. B. Import all users from the LDAP server into a RADIUS server with an LDAP-to-RADIUS conversion tool. C. Implement a RADIUS server and query user authentication requests through the LDAP server. D. Mirror the LDAP server to a RADIUS database within a WLAN controller and perform daily backups to synchronize the user databases.

Discussion 0

Correct Answer: C Vote an answer

Question 6

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections.
XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

A. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP. B. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate. C. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP. D. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

A. The PMK is generated from a successful mutual EAP authentication. When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake. B. If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user's passphrase. The PMK is then used during the 4-way handshake to create data encryption keys. C. After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK, is derived from the AAA key and is hashed with the PMK to create the PTK and GTK. D. The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK.
The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.

Discussion 0

Correct Answer: D Vote an answer

Question 8

You must locate non-compliant 802.11 devices. Which one of the following tools will you use and why?

A. A spectrum analyzer, because it can show the energy footprint of a device using WPA differently from a device using WPA2. B. A spectrum analyzer, because it can decode the PHY preamble of a non-compliant device. C. A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance D. A protocol analyzer, because it can be used to view the spectrum energy of non-compliant 802.11 devices, which is always different from compliant devices.

Discussion 0

Correct Answer: C Vote an answer

Question 9

When implementing a BYOD network, to what location should personal devices be restricted until they are compliant with policy?

A. To the lab network B. To the untagged VLAN C. To the guest network D. To the walled garden

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

What is the primary function of a wireless IDS/IPS system?

A. To encrypt wireless traffic between access points B. To detect and prevent unauthorized access or attacks on the wireless network C. To manage wireless network IP address allocation D. To create dynamic VLAN assignments

Discussion 0

Correct Answer: B Vote an answer

Question 11

While seeking the source of interference on channel 11 in your 802.11n WLAN running within 2.4 GHz, you notice a signal in the spectrum analyzer real time FFT display. The signal is characterized with the greatest strength utilizing only 1-2 megahertz of bandwidth and it does not use significantly more bandwidth until it has weakened by roughly 20 dB. At approximately -70 dB, it spreads across as much as 35 megahertz of bandwidth. What kind of signal is described?

A. A 2.4 GHz WLAN transmission using transmit beam forming B. A high-power, narrowband signal C. An HT-OFDM access point D. A high-power ultra wideband (UWB) Bluetooth transmission E. A deauthentication flood from a WIPS blocking an AP F. A frequency hopping wireless device in discovery mode

Discussion 0

Correct Answer: B Vote an answer

CWNP Certified Wireless Security Professional (CWSP) - CWSP-208 Exam Practice Test