Question 1

What protocols allow a network administrator to securely manage the configuration of WLAN controllers and access points? (Choose 2)

ASNMPv1

BHTTPS

CTelnet

DTFTP

EFTP

FSSHv2

Answer : B, F

Question 2

Given: XYZ Company has recently installed a controller-based WLAN and is using a RADIUS server to query authentication requests to an LDAP server. XYZ maintains user-based access policies and would like to use the RADIUS server to facilitate network authorization.

What RADIUS features could be used by XYZ to assign the proper network permissions to users during authentication? (Choose 2)

AThe RADIUS server can communicate with the DHCP server to issue the appropriate IP address and VLAN assignment to users.

BThe RADIUS server can support vendor-specific attributes in the ACCESS-ACCEPT response, which can be used for user policy assignment.

CRADIUS can reassign a client's 802.11 association to a new SSID by referencing a username-to-SSID mapping table in the LDAP user database.

DRADIUS can send a DO-NOT-AUTHORIZE demand to the authenticator to prevent the STA from gaining access to specific files, but may only employ this in relation to Linux servers.

ERADIUS attributes can be used to assign permission levels, such as read-only permission, to users of a particular network resource.

Answer : B, E

Question 3

Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

AMinimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.

BAllow access to specific files and applications based on the user's WMM access category.

CProvide two or more user groups connected to the same SSID with different levels of network privileges.

DAllow simultaneous support for multiple EAP types on a single access point.

Answer : C

Question 4

Given: A large enterprise is designing a secure, scalable, and manageable 802.11n WLAN that will support thousands of users. The enterprise will support both 802.1X/EAP-TTLS and PEAPv0/MSCHAPv2. Currently, the company is upgrading network servers as well and will replace their existing Microsoft IAS implementation with Microsoft NPS, querying Active Directory for user authentication.

For this organization, as they update their WLAN infrastructure, what WLAN controller feature will likely be least valuable?

AWPA2-Enterprise authentication/encryption

BInternal RADIUS server

CWIPS support and integration

D802.1Q VLAN trunking

ESNMPv3 support

Answer : B

Question 5

Given: The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources.

What single WLAN security feature should be implemented to comply with these requirements?

AMutual authentication

BCaptive portal

CRole-based access control

DGroup authentication

ERADIUS policy accounting