[2026] CWNP Certified Wireless Security Professional (CWSP)

문제1

When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

A. RADIUS shared secret

B. Server credentials

C. User credentials

D. X.509 certificates

정답: C

문제2

You are implementing an 802.11ac WLAN and a WIPS at the same time. You must choose between integrated and overlay WIPS solutions. Which of the following statements is true regarding integrated WIPS solutions?

A. Many integrated WIPS solutions that detect Voice over Wi-Fi traffic will cease scanning altogether to accommodate the latency sensitive client traffic.

B. Integrated WIPS use special sensors installed alongside the APs to scan for threats.

C. Integrated WIPS is always more expensive than overlay WIPS.

D. Integrated WIPS always perform better from a client throughput perspective because the same radio that performs the threat scanning also services the clients.

정답: A

문제3

Why should you use lockable enclosures for your APs in outdoor deployments?

A. To prevent unauthorized physical access

B. To prevent guest access

C. To protect the APs from rain

D. To protect the APs from wind

정답: A

문제4

You are planning for an update to the organization's security policies during a new rollout of
802.11ax 6 GHz-capable APs. What is the most important factor that determines the success of such policies?

A. That WPA3-Enterprise is used in the 6 GHz band

B. That management supports any changes to the policies

C. That all networks used OWE for simpler management

D. That a security monitoring system be required by the policies

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제5

When implementing a WPA2-Enterprise security solution, what protocol must the selected RADIUS server support?

A. LWAPP, GRE, or CAPWAP

B. IPSec/ESP

C. LDAP

D. CCMP and TKIP

E. EAP

정답: E

문제6

You must support a TSN as you have older wireless equipment that will not support the required processing of AES encryption. Which one of the following technologies will you use on the network so that a TSN can be implemented that would not be required in a network compliant with 802.11- 2012 non-deprecated technologies?

A. WPA2

B. WEP

C. CCMP

D. RC4

정답: D

문제7

What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

A. The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.

B. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.

C. The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.

D. The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.

정답: B

문제8

Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations. As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication? (Choose 2)

A. MS-CHAPv2 is subject to offline dictionary attacks.

B. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.

C. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.

D. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.

E. MS-CHAPv2 uses AES authentication, and is therefore secure.

F. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.

정답: A,D

문제9

What metric defines the aggregate expected loss from a risk occurrence in a year?

A. DDE

B. SLE

C. ARO

D. ALE

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제10

What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

A. Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.

B. Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

C. The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.

D. Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.

정답: B

문제11

Given: Many corporations configure guest VLANs on their WLAN controllers that allow visitors to have Internet access only. The guest traffic is tunneled to the DMZ to prevent some security risks.
In this deployment, what risks are still associated with implementing the guest VLAN without any advanced traffic monitoring or filtering features enabled? (Choose 2)

A. Once guest users are associated to the WLAN, they can capture 802.11 frames from the corporate VLANs.

B. Intruders can send spam to the Internet through the guest VLAN.

C. Unauthorized users can perform Internet-based network attacks through the WLAN.

D. Peer-to-peer attacks can still be conducted between guest users unless application-layer monitoring and filtering are implemented.

E. Guest users can reconfigure AP radios servicing the guest VLAN unless unsecure network management protocols (e.g. Telnet, HTTP) are blocked.

정답: B,C

CWNP Certified Wireless Security Professional (CWSP) - CWSP-208무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트