CWSP Certified Wireless Security Professional Exam Questions PDF download

QUESTION: 6

During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?

The username can be looked up in a dictionary file that lists common username/password combinations.
The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.
The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

Answer(s): D

Reveal Solution Next Question

QUESTION: 7

In XYZ’s small business, two autonomous 802.11ac APs and 12 client devices are in use with WPA2-Personal. What statement about the WLAN security of this company is true?

Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.
Because WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.
A successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client.
An unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic.
An unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user’s 4-Way Handshake.

Answer(s): C

Reveal Solution Next Question

The Aircrack-ng WLAN software tool can capture and transmit modified 802.11 frames over the wireless network. It comes pre-installed on Kali Linux and some other Linux distributions. Which one of the following would not be a suitable penetration testing action taken with this tool?

Auditing the configuration and functionality of a WIPS by simulating common attack sequences.
Transmitting a deauthentication frame to disconnect a user from the AP.
Cracking the authentication or encryption processes implemented poorly in some WLANs.
Probing the RADIUS server and authenticator to expose the RADIUS shared secret.

Answer(s): D

Reveal Solution Next Question

QUESTION: 9

You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution. In this configuration, the wireless network is initially susceptible to what type of attack?

Offline dictionary attacks
Application eavesdropping
Session hijacking
Layer 3 peer-to-peer
Encryption cracking

Answer(s): A

Reveal Solution Next Question

QUESTION: 10

ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MSCHAPv2 has proven vulnerable in improper implementations. As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication?

MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
MS-CHAPv2 uses AES authentication, and is therefore secure.
MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
LEAP’s use of MS-CHAPv2 is only secure when combined with WEP.

Answer(s): A

Reveal Solution Next Question

CWNP CWSP Certified Wireless Security Professional CWSP-206 Dumps in PDF

Free CWNP CWSP-206 Real Questions (page: 13)

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10