CWSP-206 new study guide pdf – Prepaway Exam Dumps

The Best CWSP-206 Exam Study Material Premium Files and Preparation Tool (Sep-2023)

Get Instant Access to CWSP-206 Practice Exam Questions

How Does the Exam Look Like?

CWSP certification can only be earned when a candidate successfully passes the CWSP-206 test. It comprises 60 multiple choice questions that should be answered within 90 minutes. These questions are based on multiple domains and validate the knowledge of the applicant on topics like wireless management protocols, WLAN discovery techniques, and so on. The exam costs $275 and is available in the English language only. Still, it can be taken up at the Pearson VUE centers spread across the globe.

As far as the passing score is concerned, it differs as per the status of the test taker. For instance, if the examinee is a professional then securing 70% or higher marks will lead to success in the CWSP-206 exam. However, instructors need to acquire 80% or more to get accredited. For both groups of candidates, the gained score is valid for three years. Those willing to enjoy the benefits of the certificate beyond that must aim at the CWNE certification before the validity period ends.

CWNP CWSP-206 (CWSP Certified Wireless Security Professional) Certification Exam is a highly respected and sought-after certification for professionals in the IT industry. CWSP Certified Wireless Security Professional certification exam is designed to validate the knowledge and skills of wireless security professionals who are responsible for securing wireless networks in an enterprise environment.

NO.70 In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation’s wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user’s connections. XYZ’s legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant’s software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.

If the consultant’s software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ’s current 802.11b data rates, all WLAN clients will reassociate to the faster AP.

A higher SSID priority value configured in the Beacon frames of the consultant’s software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.

All WLAN clients will reassociate to the consultant’s software AP if the consultant’s software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.

NO.71 Which of the following are the three main intended goals of WEP encryption? Each correct answer represents a complete solution. Choose all that apply.

Access control

Authentication

Data integrity

Confidentiality

NO.72 You need to set up a management system on your network.
Which of the following protocols will you use to manage your network?

SNMP

TCP

HTTP

NO.73 You work as a Network Administrator for Tech Perfect Inc. The company has a wireless LAN infrastructure. The management wants to prevent unauthorized network access to local area networks and other information assets by the wireless devices. What will you do?

Implement a dynamic NAT.

Implement an ACL.

Implement a WIPS.

Implement a firewall.

NO.74 Which of the following protocols is used by Point-to-Point (PPP) servers to validate the identity of remote clients?

EAP-TTLS

CHAP

PPP

IPSec

NO.75 ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless data. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hotspot include:
* Cannot access corporate network resources
* Network permissions are limited to Internet access
* All stations must be authenticated
What security controls would you suggest? (Choose the single best answer.)

Configure access control lists (ACLs) on the guest WLAN to control data types and destinations.

Require guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.

Implement separate controllers for the corporate and guest WLANs.

Use a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.

Force all guest users to use a common VPN protocol to connect.

NO.76 After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify the security threats?

Separate security profiles must be defined for network operation in different regulatory domains.

WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.

Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.

Authorized PEAP usernames must be added to the WIPS server’s user database.

NO.77 The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames. In a WPA2-Enterprise network, what process immediately follows the 802.11 association procedure?

802.1X/ EAPauthentication

Group Key Handshake

DHCP Discovery

RADIUS shared secret lookup

4-Way Handshake

Passphrase-to-PSK mapping

NO.78 Fred works primarily from home and public wireless hotspots rather than commuting to office. He frequently accesses the office network remotely from his Mac laptop using the local 802.11 WLAN. In this remote scenario, what single wirelesssecurity practice will provide the greatest security for Fred?

Use enterprise WIPS on the corporate office network.

Use 802.1X/PEAPv0 to connect to the corporate office network from public hotspots.

Use secure protocols, such as FTP, for remote file transfers.

Use an IPSec VPN for connectivity to the office network.

Use only HTTPS when agreeing to acceptable use terms on public networks.

Use WIPS sensor software on the laptop to monitor for risks and attacks.

NO.79 You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet. What must you do to implement these APs in a secure manner beyond the normal indoor APimplementations? (Choose the single best answer.)

Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.

Use internal antennas.

Use external antennas.

Power the APs using PoE.

NO.80 In order to acquire credentials of a valid user on a public hotspot network, what attacks may be conducted?
Choose thesingle completely correct answer.

MAC denial of service and/or physical theft

Social engineering and/or eavesdropping

Authentication cracking and/or RF DoS

Code injection and/or XSS

RF DoS and/or physical theft

NO.81 When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used bythe WNMS to issue configuration changes to APs?

PPTP

802.1X/EAP

TFTP

SNMPv3

IPSec/ESP

NO.82 During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?

The username can be looked up in a dictionary file that lists common username/password combinations.

The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.

4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.

The username is an input to the LEAPchallenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

NO.83 Which of the following protocols uses separate control and data connections between the client and server applications?

HTTP

FTP

SMTP

SCP

NO.84 You work as a Network Administrator for Tech Perfect Inc. The company has a secure wireless network. Since the company’s wireless network is so dynamic, it requires regular auditing to maintain proper security. For this reason, you are configuring NetStumbler as a wireless auditing tool. What services can NetStumbler provide? Each correct answer represents a complete solution. Choose all that apply.

Detection of causes of wireless interference

Verification of network configurations

Detection of unauthorized (“rogue”) access points

Capturing and decoding of packets

NO.85 You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity. For what is the described utility used?

Generating PMKs that can be imported into 802.11 RSN-compatible devices.

Generating passwords for WLAN infrastructure equipment logins.

Generating dynamic session keys used for IPSec VPNs.

Generating GTKs for broadcast traffic encryption.

NO.86 Your organization is using EAP as an authentication framework with a specific type that meets the requirements of your corporate policies. Which one of the following statements is true related to this implementation?

The client STAs may communicate over the controlled port in order to authenticate as soon as the Open System authentication completes.

The client STAs may communicate over the uncontrolled port in order to authenticate as soon as the Open System authentication completes.

The client STAs may use a different, but complementary, EAP type than the AP STAs.

The client will be the authenticator in this scenario.

NO.87 Yousupport a coffee shop and have recently installed a free 802.11ac wireless hotspot for the benefit of your customers. You want to minimize legal risk in the event that the hotspot is used for illegal Internet activity.
What option specifies the best approach to minimize legal risk at this public hotspot while maintaining an open venue for customer Internet access?

Require client STAs to have updated firewall and antivirus software.

Block TCP port 25 and 80 outbound on the Internet router.

Use a WIPS to monitor all traffic and deauthenticate malicious stations.

Implement a captive portal with an acceptable use disclaimer.

Allow only trusted patrons to use the WLAN.

Configure WPA2-Enterprise security on the access point.

NO.88 Which of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

It does not support a RADIUS server.

It is not a valid EAP type.

It does not support mutual authentication.

It does notsupport the outer identity.

Validate your Skills with Updated CWSP-206 Exam Questions & Answers and Test Engine: https://www.prepawayexam.com/CWNP/braindumps.CWSP-206.ete.file.html

Tag Archives: CWSP-206 new study guide pdf

How Does the Exam Look Like?