最新的CWNP CWSP-208免費考試真題

問題1

While seeking the source of interference on channel 11 in your 802.11n WLAN running within 2.4 GHz, you notice a signal in the spectrum analyzer real time FFT display. The signal is characterized with the greatest strength utilizing only 1-2 megahertz of bandwidth and it does not use significantly more bandwidth until it has weakened by roughly 20 dB. At approximately -70 dB, it spreads across as much as 35 megahertz of bandwidth.
What kind of signal is described?

A. A 2.4 GHz WLAN transmission using transmit beam forming

B. A high-power ultra wideband (UWB) Bluetooth transmission

C. A high-power, narrowband signal

D. A deauthentication flood from a WIPS blocking an AP

E. A frequency hopping wireless device in discovery mode

F. An HT-OFDM access point

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections. XYZ's legacy network is using 802.11 n APs with 802.11b, 11g, and 11n client devices.
With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

A. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.

B. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP.

C. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.

D. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題3

Given: You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution.
In this configuration, the wireless network is initially susceptible to what type of attacks? (Choose 2)

A. Layer 3 peer-to-peer

B. Layer 1 DoS

C. Application eavesdropping

D. Encryption cracking

E. Session hijacking

F. Offline dictionary attacks

正確答案: B,F

說明：（僅 Fast2test 成員可見）

問題4

Given: You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet.
What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations? (Choose the single best answer.)

A. Power the APs using PoE.

B. Use internal antennas.

C. User external antennas.

D. Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題5

Given: The Aircrack-ng WLAN software tool can capture and transmit modified 802.11 frames over the wireless network. It comes pre-installed on Kali Linux and some other Linux distributions.
What are three uses for such a tool? (Choose 3)

A. Probing the RADIUS server and authenticator to expose the RADIUS shared secret

B. Auditing the configuration and functionality of a WIPS by simulating common attack sequences

C. Cracking the authentication or encryption processes implemented poorly in some WLANs

D. Transmitting a deauthentication frame to disconnect a user from the AP.

正確答案: B,C,D

說明：（僅 Fast2test 成員可見）

問題6

What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?

A. EAP-TLS does not protect the client's username and password inside an encrypted tunnel.

B. EAP-TLS cannot establish a secure tunnel for internal EAP authentication.

C. EAP-TLS is supported only by Cisco wireless infrastructure and client devices.

D. Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.

E. EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.

正確答案: E

說明：（僅 Fast2test 成員可見）

最新的CWNP Certified Wireless Security Professional (CWSP) - CWSP-208免費考試真題

聯系我們

站內鏈接

最新更新