최신 CWSP-208 무료덤프 - CWNP Certified Wireless Security Professional (CWSP)

문제1

Given: A WLAN consultant has just finished installing a WLAN controller with 15 controller-based APs.
Two SSIDs with separate VLANs are configured for this network, and both VLANs are configured to use the same RADIUS server. The SSIDs are configured as follows:
SSID Blue - VLAN 10 - Lightweight EAP (LEAP) authentication - CCMP cipher suite SSID Red - VLAN 20 - PEAPv0/EAP-TLS authentication - TKIP cipher suite The consultant's computer can successfully authenticate and browse the Internet when using the Blue SSID.
The same computer cannot authenticate when using the Red SSID.
What is a possible cause of the problem?

A. The TKIP cipher suite is not a valid option for PEAPv0 authentication.

B. The consultant does not have a valid Kerberos ID on the Blue VLAN.

C. The client does not have a proper certificate installed for the tunneled authentication within the established TLS tunnel.

D. The Red VLAN does not use server certificate, but the client requires one.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Given: Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a dedicated server named SRV21. One example client is a MacBook Pro with 8 GB RAM.
What device functions as the 802.1X/EAP Authenticator?

A. RADIUS server

B. SRV21

C. MacBook Pro

D. WLAN Controller/AP

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

What is one advantage of using EAP-TTLS instead of EAP-TLS as an authentication mechanism in an 802.11 WLAN?

A. EAP-TTLS does not require the use of a certificate for each STA as authentication credentials, but EAP- TLS does.

B. EAP-TTLS does not require an authentication server, but EAP-TLS does.

C. EAP-TTLS supports client certificates, but EAP-TLS does not.

D. EAP-TTLS sends encrypted supplicant credentials to the authentication server, but EAP-TLS uses unencrypted user credentials.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Given: Many corporations configure guest VLANs on their WLAN controllers that allow visitors to have Internet access only. The guest traffic is tunneled to the DMZ to prevent some security risks.
In this deployment, what risks are still associated with implementing the guest VLAN without any advanced traffic monitoring or filtering features enabled? (Choose 2)

A. Once guest users are associated to the WLAN, they can capture 802.11 frames from the corporate VLANs.

B. Unauthorized users can perform Internet-based network attacks through the WLAN.

C. Peer-to-peer attacks can still be conducted between guest users unless application-layer monitoring and filtering are implemented.

D. Guest users can reconfigure AP radios servicing the guest VLAN unless unsecure network management protocols (e.g. Telnet, HTTP) are blocked.

E. Intruders can send spam to the Internet through the guest VLAN.

정답: B,E

설명: (DumpTOP 회원만 볼 수 있음)

문제5

What 802.11 WLAN security problem is directly addressed by mutual authentication?

A. Weak Initialization Vectors

B. Offline dictionary attacks

C. Disassociation attacks

D. Weak password policies

E. Wireless hijacking attacks

F. MAC spoofing

정답: E

설명: (DumpTOP 회원만 볼 수 있음)

문제6

You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity. For what is the described utility used? (Choose 3)

A. Generating dynamic session keys used for IPSec VPNs

B. Generating passphrases for WLAN systems secured with WPA2-Personal

C. Generating secret keys for RADIUS servers and WLAN infrastructure devices

D. Generating PMKs that can be imported into 802.11 RSN-compatible devices

E. Generating passwords for WLAN infrastructure equipment logins

정답: B,C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

ABC Company uses the wireless network for highly sensitive network traffic. For that reason, they intend to protect their network in all possible ways. They are continually researching new network threats and new preventative measures. They are interested in the security benefits of 802.11w, but would like to know its limitations.
What types of wireless attacks are protected by 802.11w? (Choose 2)

A. Layer 2 Disassociation attacks

B. Social engineering attacks

C. Robust management frame replay attacks

D. RF DoS attacks

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

최신 CWSP-208 무료덤프 - CWNP Certified Wireless Security Professional (CWSP)

우리와 연락하기

유용한 링크

최신 업데이트