What field in the RSN information element (IE) will indicate whether PSK- or Enterprise-based WPA or WPA2 is in use?

• A. RSN Capabilities
• B. AKM Suite List
• C. Pairwise Cipher Suite List
• D. Group Cipher Suite

When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used by the WNMS to issue configuration changes to APs?

• A. PPTP
• B. SNMPv3
• C. IPSec/ESP
• D. 802.1X/EAP
• E. TFTP

Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States. 802.1X/EAP is ABC's preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources.
What security best practices should be followed in this deployment scenario?

• A. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.
• B. RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.
• C. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.
• D. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

Given: You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet.
What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations?
(Choose the single best answer.)

• A. Use internal antennas.
• B. User external antennas.
• C. Power the APs using PoE.
• D. Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.

ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism.
As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

• A. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.
• B. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.
• C. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.
• D. The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next.