Question 1

Given: One of the security risks introduced by WPA2-Personal is an attack conducted by an authorized network user who knows the passphrase. In order to decrypt other users' traffic, the attacker must obtain certain information from the 4-way handshake of the other users.

In addition to knowing the Pairwise Master Key (PMK) and the supplicant's address (SA), what other three inputs must be collected with a protocol analyzer to recreate encryption keys? (Choose 3)

AAuthenticator nonce

BSupplicant nonce

CAuthenticator address (BSSID)

DGTKSA

EAuthentication Server nonce

Answer : A, B, C

Question 2

What security vulnerabilities may result from a lack of staging, change management, and installation procedures for WLAN infrastructure equipment? (Choose 2)

AThe WLAN system may be open to RF Denial-of-Service attacks

BWIPS may not classify authorized, rogue, and neighbor APs accurately

CAuthentication cracking of 64-bit Hex WPA-Personal PSK

DManagement interface exploits due to the use of default usernames and passwords for AP management

EAES-CCMP encryption keys may be decrypted

Answer : B, D

Question 3

What statements are true about 802.11-2012 Protected Management Frames? (Choose 2)

A802.11w frame protection protects against some Layer 2 denial-of-service (DoS) attacks, but it cannot prevent all types of Layer 2 DoS attacks.

BWhen frame protection is in use, the PHY preamble and header as well as the MAC header are encrypted with 256- or 512-bit AES.

CAuthentication, association, and acknowledgment frames are protected if management frame protection is enabled, but deauthentication and disassociation frames are not.

DManagement frame protection protects disassociation and deauthentication frames.

Answer : A, D

Question 4

Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.

What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

AAll integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.

BIntegrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.

CLaptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.

DOnly Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.

EThe only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.

Answer : B

Question 5

Given: ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless dat

a. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hot-spot include:

Cannot access corporate network resources

Network permissions are limited to Internet access

All stations must be authenticated

What security controls would you suggest? (Choose the single best answer.)

AImplement separate controllers for the corporate and guest WLANs.

BUse a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.

CConfigure access control lists (ACLs) on the guest WLAN to control data types and destinations.

DRequire guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.

EForce all guest users to use a common VPN protocol to connect.

Answer : D

Free CWNP Certified Wireless Security Professional (CWSP) (CWSP-208) Practice Questions

CWNP CWSP-208 Sample Exam Questions

Question 1

Question 2

Question 3

Question 4

Question 5