Good CWSP-207 Exam Dumps Save Your Preparation Time

1. The ACME Company has over 300 WLAN users communicating through 25 access points using Generic Routing Encapsulation (GRE) to tunnel all 802.11 user traffic back to a central WLAN controller capable of role-based access control (RBAC).

What type of access restrictions can be placed on the users after authentication?

2. What type of solution can be used to perform countermeasures against a rogue access point?

3. What is the recommended ratio of WIPS sensors providing security monitoring to access points that are providing access for WLAN clients?

4. Which RADIUS packets can be sent from a RADIUS server to an access point when 802.1X/EAP is the deployed WLAN security solution? (Choose all that apply.)

5. What are some extra restrictions that can be placed on a guest user other than those defined by the guest firewall policy? (Choose all that apply.)

6. How does a RADIUS server communicate with an authenticator? (Choose all that apply.)

7. TKIP/ARC4 encryption adds an extra _________ of overhead to the body of an 802.11 MPDU.

8. Which of these types of EAP require a client-side X.509 digital certificate to be used as the supplicant credentials? (Choose all that apply.)

9. What is the protocol used by iOS and Mac OS devices for over-the-air provisioning of MDM profiles using certificates and SSL encryption?

10. What are some of the major differences between SNMPv3 and SNMPv2? (Choose all that apply.)

11. PSK authentication using ARC4 encryption is mandatory in which of the following? (Choose all that apply.)

12. Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)

13. What must occur in order for dynamic TKIP/ARC4 or CCMP/AES encryption keys to be generated? (Choose all that apply.)

14. What is the main WLAN security risk shown in this graphic?

15. When TKIP is selected as the pairwise cipher suite, what frame types may be protected with data confidentiality? (Choose 2)

16. Which RADIUS attribute is used to encapsulate EAP frames within RADIUS packets?

17. Over the years, your company has deployed various wireless devices throughout its network. Many of these devices have been in place for quite some time and can only be configured for secure transmissions using WEP.

What can you do to improve network security with the least disruption of service?

18. The graphic shows a packet capture of a successful 802.11 authentication.





In which of the following types of client connections could this not occur?

19. Which of these security methods is being considered by the Wi-Fi Alliance as a replacement for PSK authentication?

20. Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems.

While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.

As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication? (Choose 2)

21. Which one of these use cases for a per-user/per-device implementation of PSK authentication is not recommended?

22. WLAN administrator Marko Tisler is troubleshooting an IPsec VPN problem that has been deployed as the security solution over a point-to-point 802.11 wireless bridge link between two buildings.

Marko cannot get the VPN tunnel to establish and notices that the IKE Phase 1 exchange is successful; however, IKE Phase 2 is failing.

What are the possible causes of this problem? (Choose all that apply.)

23. When 802.1X/EAP is properly deployed, which of these external databases can a RADIUS server query for proxy authentication?

24. Which of the following are Layer 2 encryption methods defined by the 802.11-2012 standard? (Choose all that apply.)

25. Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network.

Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections. XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices.

With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

26. After viewing the image shown here, what type of credentials can be strengthened with the software application that is depicted? (Choose all that apply.)

27. Which of these roaming methods requires the use of FT Action frames?

28. Which of the following specifications are true for an SSID? (Choose all that apply.)

29. Which logical plane of network operation is typically defined by protocols and intelligence?

30. A very well-written wireless security policy is in place within your organization. However, you still find rogue devices, poorly configured APs, users who are wired leaving their wireless cards enabled, and ad hoc networks throughout your building―all of which are against policy.

Policy requires that such events are remediated and documented as they occur. Your WIPS has been configured to assist you in meeting this requirement and is doing so. The only people allowed in your building are your own employees. You are not under an attack but still keep finding the same problems daily.

Which portion of good security policy is most likely lacking that has led to this problem?

31. The network administrator of the WonderPuppy Coffee Company calls up the support hotline for his WLAN vendor and informs the support personnel that the WLAN is broken.

The support personnel ask the customer a series of questions so that they can isolate and identify the cause of a potential problem.

What are some common Troubleshooting 101 questions? (Choose all that apply.)

32. A merchant hires you to install a wireless network for processing credit cards in all of their new retail outlets as the stores are opened over the next six months. They have already purchased APs at an auction for you to install.

Upon inspection of the APs, you find that they cannot be upgraded to support authentication and encryption beyond 64-bit WEP. You immediately inform the merchant that the APs they have purchased cannot be deployed in their new stores.

What is the best reason you can give the merchant for not being able to use the APs they have already purchased?

33. What are the keys that make up a pairwise transient key? (Choose all that apply.)

34. WLAN administrator Tammy O’Connell has been tasked with securing the corporate WLAN with 802.1X/EAP security. She has chosen to use the EAP-PEAPv0 (MSCHAPv2) protocol on the RADIUS servers and supplicants. Tammy created a root certificate using the company’s internal private Certificate Authority (CA) solution.

She also created a server certificate, which was signed by the internal private CA. The wireless clients connecting to the WLAN include a mixture of corporate Windows laptops. Employees will also be connecting with personal devices such as Android phones and tablets.

What other steps must Tammy take to ensure full functionality with 802.1X/EAP security? (Choose all that apply.)

35. WPA

36. Which of these protocol adherence and performance metrics will most likely be defined by the Wi-Fi Alliance Voice Enterprise certification? (Choose all that apply.)

37. What is the difference between the inner and outer identity?

38. What are the main goals of the Wi-Fi Alliance Voice Enterprise certification? (Choose all that apply.)

39. Which of the following is contained in a WEP-encrypted frame? (Choose all that apply.)

40. You have been tasked with configuring a secure WLAN for 600 APs at the corporate offices. All the APs and employee Windows laptops have been configured for 802.1X/EAP.





The domain user accounts are failing authentication with every attempt. After looking at some packet captures of the authentication failures, you have determined that an SSL/TLS tunnel is never created.

After viewing the graphic shown here, determine the possible causes of the problem. (Choose all that apply.)

41. Which of these types of EAP use tunneled authentication? (Choose all that apply.)

42. CCMP/AES encryption adds an extra _________ of overhead to the body of an 802.11 data frame.

43. What are some the methods that can be used to provision a root certificate onto Wi-Fi clients that function as 802.1X supplicants? (Choose all that apply.)

44. Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

45. Which components of Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) can be compromised by a denial-of-service attack? (Choose all that apply.)

46. What preventative measures are performed by a WIPS against intrusions?

47. Within the three-tier FT key hierarchy defined by fast BSS transition, which of these keys is cached on a WLAN controller or original associated AP?

48. In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

49. Identify the protocols that are normally used to manage WLAN infrastructure devices securely. (Choose all that apply.)

50. Given: Many corporations configure guest VLANs on their WLAN controllers that allow visitors to have Internet access only. The guest traffic is tunneled to the DMZ to prevent some security risks.

In this deployment, what risks are still associated with implementing the guest VLAN without any advanced traffic monitoring or filtering features enabled? (Choose 2)

51. What are some of the purposes of the 4-Way Handshake? (Choose all that apply.)

52. Given: XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication.

XYZ would like to support fast secure roaming for the phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming.

What portable solution would be recommended for XYZ to troubleshoot roaming problems?

53. Given: You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution.

In this configuration, the wireless network is initially susceptible to what type of attacks? (Choose 2)

54. The IEEE 802.11-2012 standard states which of the following regarding 802.11n data rates and encryption? (Choose all that apply.)

55. Given: A WLAN protocol analyzer trace reveals the following sequence of frames (excluding the ACK frames):

1) 802.11 Probe Req and 802.11 Probe Rsp

2) 802.11 Auth and then another 802.11 Auth

3) 802.11 Assoc Req and 802.11 Assoc Rsp

4) EAPOL-KEY

5) EAPOL-KEY

6) EAPOL-KEY

7) EAPOL-KEY

What security mechanism is being used on the WLAN?

56. Which of these WLAN auditing tools has the most success in compromising network resources when penetration testing is performed?

57. Which sublayer of the OSI model’s Data-Link layer is used for communication between 802.11 radios?

58. 1.What are of some of the common security capabilities often integrated within in access points deployed in a distributed WLAN architecture?

59. What type of WLAN security policy defines WLAN security auditing requirements and policy violation report procedures?

60. Given: John Smith uses a coffee shop's Internet hot-spot (no authentication or encryption) to transfer funds between his checking and savings accounts at his bank's website.

The bank's website uses the HTTPS protocol to protect sensitive account information. While John was using the hot-spot, a hacker was able to obtain John's bank account user ID and password and exploit this information.

What likely scenario could have allowed the hacker to obtain John's bank account user ID and password?

61. The corporate IT administrators, Hunter, Rion, and Liam, are huddled together to try to solve an issue with the newly deployed VoWiFi phones. The chosen security solution is PEAPv0 (EAP-MSCHAPv2) for the voice SSID that also has Voice Enterprise enabled on the access points.

The VoWiFi phones are authenticating flawlessly and voice calls are stable when the employees use the devices from their desk. However, there seem to be gaps in the audio and sometimes disconnects when the employees are talking on the VoWiFi phones and move to other areas of the building.

What are the possible causes of the interruption of service for the voice calls while the employees are mobile? (Choose all that apply.)

62. What statement is true regarding the nonces (ANonce and SNonce) used in the IEEE 802.11 4 Way Handshake?

63. You have been hired to conduct a vulnerability assessment for a chipset manufacturing company. As you conduct the physical inspection of the WLAN devices, you notice that some of their APs are in locked enclosures and others are not.

Before you report the unlocked APs as being vulnerable, what should you do first?

64. What type of database can be integrated with a RADIUS server for proxy authentication?

65. What type of WLAN security is depicted by this graphic?

66. Before an 802.11 client STA can pass traffic through the AP, which two of the following must occur? (Choose two answers.)

67. Which Layer 2 protocol is used for authentication in an 802.1X framework?

68. What can happen when an intruder compromises the preshared key used during WPA/WPA2-Personal authentication? (Choose all that apply.)

69. Given: When the CCMP cipher suite is used for protection of data frames, 16 bytes of overhead are added to the Layer 2 frame. 8 of these bytes comprise the MIC.

What purpose does the encrypted MIC play in protecting the data frame?

70. What are some of the components that comprise a PMKID? (Choose all that apply.)

71. You have been tasked with configuring a secure WLAN for 900 APs at the corporate offices. All the APs and employee Windows laptops have been configured for EAP-MSCHAPv2.





You are required to provide both machine and user authentication as part of the security solution. You have verified that the backend communications between the RADIUS server and the AP are working.

After viewing the graphic shown here, determine the possible causes of the problem. (Choose all that apply.)

72. When you are troubleshooting client connectivity problems with a client using 802.1X/EAP security, what is the first action you should take to investigate a potential Layer 1 problem?

73. When developing a security policy, it is important to include many influences such as internal requirements, governmental regulations, and industry standards.

When is it allowable not to include a specific external influence in your policy development?

74. In an effort to optimize WLAN performance, ABC Company has upgraded their WLAN infrastructure from 802.11a/g to 802.11n. 802.11a/g clients are still supported and are used throughout ABC's facility.

ABC has always been highly security conscious, but due to budget limitations, they have not yet updated their overlay WIPS solution to 802.11n or 802.11ac.

Given ABC's deployment strategy, what security risks would not be detected by the 802.11a/g WIPS?

75. What does 802.1X/EAP provide when implemented for WLAN security? (Choose all that apply.)

76. What policy would help mitigate the impact of peer-to-peer attacks against wireless-enabled corporate laptop computers when the laptops are also used on public access networks such as wireless hot-spots?

77. Given: Many computer users connect to the Internet at airports, which often have 802.11n access points with a captive portal for authentication.

While using an airport hot-spot with this security solution, to what type of wireless attack is a user susceptible? (Choose 2)

78. You have been tasked with configuring a secure WLAN for 300 APs at the corporate offices. All the APs and employee Windows laptops have been configured for 802.1X using PEAPv0 (EAP-MSCHAPv2). The domain user accounts are failing authentication with every attempt.





After viewing the graphic shown here, determine the possible causes of the problem. (Choose all that apply.)

79. Fred works primarily from home and public wireless hotspots rather than commuting to office. He frequently accesses the office network remotely from his Mac laptop using the local 802.11 WLAN.

In this remote scenario, what single wireless security practice will provide the greatest security for Fred?

80. What type of credential is used by the authenticator and authentication server to validate each other?

81. Which of these terms best describes a measure of uncertainty associated with a random variable?

82. A robust security network (RSN) requires the use of which security mechanisms? (Choose all that apply.)

83. What is the main purpose of using a WLAN protocol analyzer during the Layer 2 analysis of a WLAN security audit? (Choose all that apply.)

84. Given: ABC Company is an Internet Service Provider with thousands of customers. ABC's customers are given login credentials for network access when they become a customer.

ABC uses an LDAP server as the central user credential database. ABC is extending their service to existing customers in some public access areas and would like to use their existing database for authentication.

How can ABC Company use their existing user database for wireless user authentication as they implement a large-scale WPA2-Enterprise WLAN security solution?

85. Given: The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources.

What single WLAN security feature should be implemented to comply with these requirements?

86. You have been tasked with configuring a secure WLAN for 600 APs at the corporate offices. All the APs and employee Windows laptops have been configured for EAP-MSCHAPv2. User authentication is failing for one of the employee laptops.





After viewing the graphic shown here, determine the possible causes of the problem. (Choose all that apply.)

87. When two client stations are already associated to an AP, which handshake is used to create a different unicast key that the two client stations can use for a private conversation while they remain associated to the AP?

88. Which of the following keys is derived from a preshared key and Extensible Authentication Protocol (EAP)?

89. Wireless Intrusion Prevention Systems (WIPS) are used for what purposes? (Choose 3)

90. When used as part of a WLAN authentication solution, what is the role of LDAP?

91. You have been tasked with configuring a secure WLAN for 900 APs at the corporate offices. All the APs and employee Windows laptops have been configured for EAP-MSCHAPv2. The WLAN clients are never able to connect to the WLAN.





After viewing the graphic shown here, determine the possible causes of the problem. (Choose all that apply.)

92. 802.1X/EAP is mandatory in which of the following? (Choose all that apply.)

93. What layers of the OSI model are protected by encryption with an IPsec VPN security solution?

94. During an 802.1X/EAP authentication process, which RADIUS attributes might be used to assign users that are members of different Active Directory groups to distinctive roles with unique user traffic policies? (Choose all that apply.)

95. What components make up a distribution system? (Choose all that apply.)

96. What would be the intended purpose of using a third-party AP as part of a WLAN audit?

97. What wireless authentication technologies may build a TLS tunnel between the supplicant and the authentication server before passing client authentication credentials to the authentication server? (Choose 3)

98. What EAP type supports using MS-CHAPv2, EAP-GTC or EAP-TLS for wireless client authentication?

99. What WLAN client device behavior is exploited by an attacker during a hijacking attack?

100. Which management protocols are often used between a network management server (NMS) and remote access points for the purpose of monitoring a WLAN? (Choose all that apply.)

101. Name the labels that a WIPS uses to classify an 802.11 device. (Choose all that apply.)

102. Which 802.11 Layer 2 protocol is used for authentication in an 802.1X framework?

103. View the frame capture of the 4-Way Handshake in the graphic shown here.





Which EAPOL-Key message frame is displayed?

104. What kind of remote actions can an MDM administrator send to the mobile device over the Internet?

105. Why does RF fingerprinting offer more accurate device location information than simple triangulation?

106. Which of these authentication methods are supported by RADIUS and can be used for WLAN security? (Choose all that apply.)

107. During an 802.1X/EAP authentication process, which LDAP attribute is used to assign users that belong to different Active Directory groups into distinctive roles with unique user traffic policies? (Choose all that apply.)

108. What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

109. AES supports three key lengths of 128, 192, and 256. The number of rounds performed for AES-128 is _______, for AES-192 is _______, and for AES-256 is _______. (Choose all that apply.)

110. To calculate the capability Jeff should have on the network, which of the following can the NAC server use to initially identify and set his permission? (Choose all that apply.)

111. The Wi-Fi Alliance is responsible for which of the following certification programs? (Choose all that apply.)

112. Which hash algorithms can be used in the IKE authentication process? (Choose two.)

113. While seeking the source of interference on channel 11 in your 802.11n WLAN running within 2.4 GHz, you notice a signal in the spectrum analyzer real time FFT display.

The signal is characterized with the greatest strength utilizing only 1-2 megahertz of bandwidth and it does not use significantly more bandwidth until it has weakened by roughly 20 dB. At approximately -70 dB, it spreads across as much as 35 megahertz of bandwidth.

What kind of signal is described?

114. Which technologies use the RC4 or ARC4 cipher? (Choose all that apply.)

115. When SSID cloaking is enabled, which of the following occurs? (Choose all that apply.)

116. CCMP is an acronym made up of multiple components.

Which of the following is an expanded version of this acronym? (Choose all that apply)

117. What type of security solution can be used to prevent rogue WLAN devices from becoming an unauthorized portal to a wired network infrastructure? (Choose all that apply.)

118. What software and hardware tools are used in the process performed to hijack a wireless station from the authorized wireless network onto an unauthorized wireless network?

119. Which of these enterprise RADIUS deployment models is the most cost-efficient but may negatively impact fast secure roaming of WLAN clients? (Choose the best answer.)

120. Which pairwise master key security associations (PMKSAs) can be uniquely identified by a pairwise master key identifier (PMKID)? (Choose all that apply.)

121. One of the first things you should do when creating a wireless security policy is to conduct an impact analysis to assist you in determining the level of acceptable risk.

What should be included in your impact analysis? (Choose all that apply.)

122. SSID: Guest BSSID: 00:11:22:00:1F:C5 VLAN 90 Security: Open with captive portal authentication 3 current clients

Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.

How many unique GTKs and PTKs are currently in place in this scenario?

123. Given: XYZ Company has recently installed an 802.11ac WLAN. The company needs the ability to control access to network services, such as file shares, intranet web servers, and Internet access based on an employee's job responsibilities.

What WLAN security solution meets this requirement?

124. Which phrase best describes a policy of permitting employees to bring personally owned mobile devices such as smartphones, tablets, and laptops to their workplace?

125. This graphic shows a WLAN discovery tool screen capture.





How many SSIDs are configured with cloaking enabled? (Choose all that apply.)

126. Which of these devices are potential sources of all-band interference? (Choose all that apply.)

127. Several computers are having network connectivity issues. Two of the computers are wired and are not having any issues. The technician verifies that none of the computers having issues have been assigned a static IP.

Which of the following should the technician check NEXT?

128. Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11.

What kind of troubleshooting are you likely performing with such a tool?

129. Which of these temporal keys are used by TKIP/ARC4 encryption? (Choose all that apply.)

130. Your network just passed an external compliance audit. However, the same day it passed the audit there was an intrusion that compromised your company’s private data.

Your staff conducted an internal audit immediately after the intrusion was detected and found that your network is still compliant. The security audit files indicate that the network was compliant during the compromise as well.

What is the most likely reason that this compromise was possible on your compliant network?

131. As defined by the 802.11w-2009 amendment, which 802.11 management frames will be safeguarded by management frame protection (MFP) mechanisms? (Choose all that apply.)

132. After consulting your written security policy, to meet the new demands of an industry standard with which your organization must be compliant, an administrator logs into your WLAN controller and changes the authentication and encryption configurations on all your APs.

The help desk becomes overwhelmed with calls from angry users stating that they can no longer access the network. One by one, the users are reconfigured to reconnect to the network, causing significant loss of time.

Which portion of a well-written security policy is most likely missing from your company’s wireless security policy that caused this problem?

133. Which type of guest management solution needs to integrate with LDAP?

134. ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming.

In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism.

As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

135. Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.

What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

136. Wireless intrusion prevention systems (WIPSs) are unable to detect which of the following attacks?

137. Which of these attacks are wireless users susceptible to at a public-access hotspot? (Choose all that apply.)