最新的CWNP CWSP認證 CWSP-207考試題庫

問題1

Which one of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

A. It does not support the outer identity.

B. It does not support a RADIUS server.

C. It does not support mutual authentication.

D. It is not a valid EAP type.

正確答案: C

問題2

Given: An 802.1X/EAP implementation includes an Active Directory domain controller running Windows Server 2012 and an AP from a major vendor. A Linux server is running RADIUS and it queries the domain controller for user credentials. A Windows client is accessing the network.
What device functions as the EAP Supplicant?

A. Windows client

B. Access point

C. Windows server

D. Linux server

E. An unlisted switch

F. An unlisted WLAN controller

正確答案: A

問題3

In the IEEE 802.11-2012 standard, what is the purpose of the 802.1X Uncontrolled Port?

A. To block unencrypted user traffic after a 4-Way Handshake completes

B. To allow only authentication frames to flow between the Supplicant and Authentication Server

C. To block authentication traffic until the 4-Way Handshake completes

D. To pass general data traffic after the completion of 802.11 authentication and key management

正確答案: B

問題4

In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

A. In corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities

B. At public hot-spots in which many clients use diverse applications

C. In university environments using multicast video training sourced from professor's laptops

D. In home networks in which file and printer sharing is enabled

正確答案: B

問題5

Joe's new laptop is experiencing difficulty connecting to ABC Company's 802.11 WLAN using 802.1X/EAP PEAPv0. The company's wireless network administrator assured Joe that his laptop was authorized in the WIPS management console for connectivity to ABC's network before it was given to him. The WIPS termination policy includes alarms for rogue stations, roque APs, DoS attacks and unauthorized roaming.
What is a likely reason that Joe cannot connect to the network?

A. Joe disabled his laptop's integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.

B. Joe configured his 802.11 radio card to transmit at 100 mW to increase his SNR. The WIPS is detecting this much output power as a DoS attack.

C. An ASLEAP attack has been detected on APs to which Joe's laptop was trying to associate. The WIPS responded by disabling the APs.

D. Joe's integrated 802.11 radio is sending multiple Probe Request frames on each channel.

正確答案: A

問題6

You are configuring seven APs to prevent common security attacks. The APs are to be installed in a small business and to reduce costs, the company decided to install all consumer-grade wireless routers. The wireless routers will connect to a switch, which connects directly to the Internet connection providing 50 Mbps of Internet bandwidth that will be shared among 53 wireless clients and 17 wired clients.
To ensure the wireless network is as secure as possible from common attacks, what security measure can you implement given only the hardware referenced?

A. WPA-Enterprise

B. WPA2-Enterprise

C. 802.1X/EAP-PEAP

D. WPA2-Personal

正確答案: D

問題7

What are the three roles of the 802.1X framework, as defined by the 802.1X standard, that are performed by the client STA, the AP (or WLAN controller), and the RADIUS server? (Choose 3)

A. Control Point

B. Registrar

C. AAA Server

D. Supplicant

E. Authentication Server

F. Enrollee

G. Authenticator

正確答案: D,E,G

最新的CWNP Wireless Security Professional (CWSP) - CWSP-207免費考試真題

最新更新

站內鏈接

聯系我們