Get The Most Updated CWSP-208 Dumps To CWNP CWSP Certification
CWNP Certified CWSP-208 Dumps Questions Valid CWSP-208 Materials
NEW QUESTION # 23
Given: WLAN protocol analyzers can read and record many wireless frame parameters.
What parameter is needed to physically locate rogue APs with a protocol analyzer?
- A. Noise floor
- B. Signal strength
- C. RSN IE
- D. IP Address
- E. BSSID
- F. SSID
Answer: B
Explanation:
While BSSID and SSID help identify and classify rogue APs, physically locating them requires using signal strength (often displayed as RSSI or dBm). By measuring signal strength from different locations, administrators can use a method called "triangulation" or "directional analysis" to approximate the physical location of the rogue device.
References:
CWSP-208 Study Guide, Chapter 6 - WLAN Protocol Analysis and Troubleshooting CWNP CWSP-208 Objectives: "Rogue Device Location and Tracking"
NEW QUESTION # 24
Given: XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication. XYZ would like to support fast secure roaming for the phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming.
What portable solution would be recommended for XYZ to troubleshoot roaming problems?
- A. WIPS sensor software installed on a laptop computer
- B. Laptop-based protocol analyzer with multiple 802.11n adapters
- C. An autonomous AP mounted on a mobile cart and configured to operate in monitor mode
- D. Spectrum analyzer software installed on a laptop computer
Answer: B
Explanation:
For troubleshooting fast roaming (e.g. 802.11r) across channels, a portable protocol analyzer with dual- or multi-band 802.11n adapters enables:
Simultaneous packet capture on different channels
Capturing handoff-related frames and timing analysis in roaming scenarios This setup allows detailed capture of reassociation, authentication, and 4-Way Handshake processes, essential for diagnosing roaming delays.
Other options (WIPS, spectrum analyzer, autonomous AP) do not support detailed 802.11 frame capture across multiple channels during roaming events.
References:
CWSP#207 Study Guide, Chapter 6 (Roaming Troubleshooting)
NEW QUESTION # 25
A single AP is configured with three separate WLAN profiles, as follows:
1. SSID: ABCData - BSSID: 00:11:22:00:1F:C3 - VLAN 10 - Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 3 current clients
2. SSID: ABCVoice - BSSID: 00:11:22:00:1F:C4 - VLAN 60 - Security: WPA2-Personal with AES-CCMP
- 2 current clients
3. SSID: Guest - BSSID: 00:11:22:00:1F:C5 - VLAN 90 - Security: Open with captive portal authentication
- 3 current clients
Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.
How many unique GTKs and PTKs are currently in place in this scenario?
- A. 3 GTKs - 8 PTKs
- B. 1 GTK - 8 PTKs
- C. 2 GTKs - 8 PTKs
- D. 2 GTKs - 5 PTKs
Answer: A
Explanation:
PTK (Pairwise Transient Key) is established per-client, so:
ABCData: 3 clients = 3 PTKs
ABCVoice: 2 clients = 2 PTKs
Guest: 3 clients = 3 PTKs
Total: 8 PTKs
GTK (Group Temporal Key) is shared per SSID, so:
One GTK per SSID (ABCData, ABCVoice, Guest)
Total: 3 GTKs
References:
CWSP-208 Study Guide, Chapter 3 (Key Hierarchy)
IEEE 802.11 Key Management Architecture
NEW QUESTION # 26
When TKIP is selected as the pairwise cipher suite, what frame types may be protected with data confidentiality? (Choose 2)
- A. Data
- B. Control
- C. QoS Data
- D. ACK
- E. Robust unicast management
- F. Robust broadcast management
Answer: A,C
Explanation:
TKIP (Temporal Key Integrity Protocol) is a pairwise encryption method introduced with WPA to enhance WEP security. TKIP can protect:
D). Data frames: These are the core unicast data transmissions between clients and access points.
F). QoS Data frames: These are a subtype of data frames supporting 802.11e/WMM enhancements and are also protected under TKIP.
Incorrect:
A & B. TKIP does not support robust management frame protection. Management frame protection is handled by 802.11w with AES-CCMP and BIP.
C & E. Control frames and ACKs are never encrypted, as they need to be read by all stations regardless of encryption status.
References:
CWSP-208 Study Guide, Chapter 3 (Frame Types and Encryption)
IEEE 802.11i Standard
NEW QUESTION # 27
You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4- way handshake.
Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)
- A. STA1 is a reassociation and STA2 is an initial association.
- B. STA1 and STA2 are using different cipher suites.
- C. STA1 is a TSN, and STA2 is an RSN.
- D. STA1 and STA2 are using different EAP types.
- E. STA2 has retransmissions of EAP frames.
Answer: D
Explanation:
Different EAP types involve varying numbers of exchanges:
EAP-TLS, for example, involves more exchanges due to certificate negotiation.
EAP-MD5 or PEAP might involve fewer steps.
Thus, the most likely reason for different frame counts during successful authentication is the use of different EAP types.
Incorrect:
A). Cipher suites are negotiated after EAP, not during it.
B). Retransmissions would typically cause noticeable delay and not result in exactly 11 frames.
C). Reassociation does not significantly reduce EAP frame count.
D). RSN/TSN differences are not directly related to EAP exchange length.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Protocol Operation)
IEEE 802.1X and EAP Behavior Documentation
NEW QUESTION # 28
When implementing a WPA2-Enterprise security solution, what protocol must the selected RADIUS server support?
- A. IPSec/ESP
- B. EAP
- C. LWAPP, GRE, or CAPWAP
- D. CCMP and TKIP
- E. LDAP
Answer: B
Explanation:
WPA2-Enterprise relies on the IEEE 802.1X framework for authentication, which requires the use of the Extensible Authentication Protocol (EAP). The RADIUS server must support EAP to facilitate the exchange of authentication credentials and method negotiation between the client (supplicant) and the authentication server.
Incorrect:
A). LWAPP, GRE, and CAPWAP are used between APs and controllers-not for client authentication.
B). IPSec/ESP is a VPN protocol, not relevant here.
D). CCMP and TKIP are encryption protocols used between clients and APs, not within the RADIUS server.
E). LDAP may be queried by the RADIUS server, but it is not sufficient on its own-it doesn't replace EAP.
References:
CWSP-208 Study Guide, Chapter 4 (802.1X Authentication Framework)
CWNP AAA Architecture Overview
NEW QUESTION # 29
Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN.
Before creating the WLAN security policy, what should you ensure you possess?
- A. End-user training manuals for the policies to be created
- B. Management support for the process
- C. Awareness of the exact vendor devices being installed
- D. Security policy generation software
Answer: B
Explanation:
Developing a robust WLAN security policy requires buy-in from executive or senior management. Without management support, it's difficult to enforce compliance, allocate resources, or prioritize security among other organizational objectives. This foundational step ensures that policy creation and enforcement are feasible and aligned with organizational goals.
Incorrect:
A). Device/vendor specifics are addressed later during implementation.
C). End-user training materials are created after the policy is finalized.
D). Security policy software can assist, but is not essential compared to management support.
References:
CWSP-208 Study Guide, Chapter 2 (Policy Development and Implementation) CWNP WLAN Lifecycle Framework
NEW QUESTION # 30
When using the 802.1X/EAP framework for authentication in 802.11 WLANs, why is the 802.1X Controlled Port still blocked after the 802.1X/EAP framework has completed successfully?
- A. The 802.1X Controlled Port is always blocked, but the Uncontrolled Port opens after the EAP authentication process completes.
- B. The 4-Way Handshake must be performed before the 802.1X Controlled Port changes to the unblocked state.
- C. The 802.1X Controlled Port remains blocked until an IP address is requested and accepted by the Supplicant.
- D. The 802.1X Controlled Port is blocked until Vender Specific Attributes (VSAs) are exchanged inside a RADIUS packet between the Authenticator and Authentication Server.
Answer: B
Explanation:
The 802.1X Controlled Port remains blocked after EAP authentication is complete. It is only unblocked once the 4-Way Handshake completes successfully. This handshake:
Confirms that both client and AP have the same PMK.
Derives the PTK and installs keys.
Once encryption keys are in place, the Controlled Port is opened for data.
Incorrect:
A). The Controlled Port is what opens after successful authentication and key establishment.
B). IP addressing (via DHCP) happens after the Controlled Port is open.
D). Vendor-Specific Attributes may play a role in policy assignment but do not govern port control timing.
References:
CWSP-208 Study Guide, Chapter 4 (802.1X and Controlled Port Behavior)
IEEE 802.1X and 802.11i Standards
NEW QUESTION # 31
After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify security threats?
- A. Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.
- B. Authorized PEAP usernames must be added to the WIPS server's user database.
- C. WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.
- D. Separate security profiles must be defined for network operation in different regulatory domains
Answer: C
Explanation:
After deploying a WIPS, an essential baseline activity is to classify all detected devices in the RF environment. These classifications allow the system to enforce security policies and detect policy violations.
Classifications include:
Authorized (managed devices)
Rogue (unauthorized, possibly dangerous)
Neighbor (not part of your network but legitimate)
External or Ad hoc devices
Without this initial classification, WIPS cannot properly assess threats or trigger alarms.
References:
CWSP-208 Study Guide, Chapter 7 - WIPS Classification and Threat Management CWNP CWSP-208 Objectives: "Device Classification and Policy Enforcement"
NEW QUESTION # 32
When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?
- A. Server credentials
- B. RADIUS shared secret
- C. User credentials
- D. X.509 certificates
Answer: C
Explanation:
In tunneled EAP types (e.g., PEAP, EAP-TTLS):
A secure TLS tunnel is first established using the server's certificate.
Then, user credentials (e.g., username/password) are sent through the encrypted tunnel to ensure confidentiality.
Incorrect:
A). Certificates are exchanged during tunnel establishment, not protected within it.
C). Server credentials are used to establish the tunnel, not protected inside it.
D). The RADIUS shared secret secures communication between AP/controller and RADIUS server-not sent via the tunnel.
References:
CWSP-208 Study Guide, Chapter 4 (Tunneled EAP Methods)
IEEE 802.1X and EAP Specifications
NEW QUESTION # 33
As a part of a large organization's security policy, how should a wireless security professional address the problem of rogue access points?
- A. A trained employee should install and configure a WIPS for rogue detection and response measures.
- B. Conduct thorough manual facility scans with spectrum analyzers to detect rogue AP RF signatures.
- C. Hide the SSID of all legitimate APs on the network so that intruders cannot copy this parameter on rogue APs.
- D. Enable port security on Ethernet switch ports with a maximum of only 3 MAC addresses on each port.
- E. Use a WPA2-Enterprise compliant security solution with strong mutual authentication and encryption for network access of corporate devices.
Answer: A
Explanation:
Rogue APs pose a significant risk and should be detected and mitigated automatically.
D). A properly configured Wireless Intrusion Prevention System (WIPS) can detect unauthorized APs and prevent client associations to them in real time.
Incorrect:
A). While WPA2-Enterprise adds client-level protection, it does not detect rogue APs.
B). Hiding SSIDs is ineffective-SSIDs are still discoverable in management frames.
C). Manual scans are labor-intensive and impractical for ongoing monitoring.
E). Port security controls wired threats but cannot detect rogue APs using wireless signals.
References:
CWSP-208 Study Guide, Chapter 6 (Wireless Intrusion Prevention Systems) CWNP Rogue Detection Strategies
NEW QUESTION # 34
Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.
As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication?
(Choose 2)
- A. MS-CHAPv2 uses AES authentication, and is therefore secure.
- B. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
- C. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.
- D. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
- E. MS-CHAPv2 is subject to offline dictionary attacks.
- F. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
Answer: E,F
Explanation:
MS-CHAPv2 is a widely used authentication protocol, but it has notable weaknesses:
B). MS-CHAPv2 is vulnerable to offline dictionary attacks. Attackers can capture authentication exchanges and attempt password guesses offline due to predictable hashing behavior.
D). The only secure use of MS-CHAPv2 is inside a secure tunnel (e.g., EAP-TTLS or PEAP), where credentials are protected during transmission.
Incorrect:
A). MS-CHAPv2 is used in WPA2-Enterprise, not WPA-Personal, and it is allowed under WPA2-Enterprise via PEAP.
C). WEP does not enhance LEAP's security; it compounds vulnerabilities.
E and F. MS-CHAPv2 does not use AES for authentication. Using AES-CCMP for encryption does not fix MS-CHAPv2's weaknesses.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Methods and Authentication Protocols) CWNP MS-CHAPv2 and PEAP Implementation Guidelines Microsoft MS-CHAPv2 Vulnerability Advisories
NEW QUESTION # 35
Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)
- A. Rogue APs
- B. DoS
- C. Eavesdropping
- D. Social engineering
Answer: C,D
Explanation:
Wireless Intrusion Prevention Systems (WIPS) are excellent for detecting on-air threats such as rogue APs, DoS attacks, spoofing, and misconfigured devices. However, WIPS cannot detect:
C). Eavesdropping - Passive listening on wireless transmissions cannot be detected because no signal is transmitted by the attacker.
D). Social engineering - Human-based attacks like phishing or pretexting fall outside the scope of wireless monitoring.
Incorrect:
A). Rogue APs can be detected via MAC address comparison, frame analysis, and signal triangulation.
B). DoS attacks, such as deauth floods or RF jamming, can be detected with appropriate WIPS sensors.
References:
CWSP-208 Study Guide, Chapter 5 (WLAN Threats and Attacks)
CWNP WIPS Implementation Guidelines
CWNP Whitepapers on Wireless Threat Detection Capabilities
NEW QUESTION # 36
You are configuring seven APs to prevent common security attacks. The APs are to be installed in a small business and to reduce costs, the company decided to install all consumer-grade wireless routers. The wireless routers will connect to a switch, which connects directly to the Internet connection providing 50 Mbps of Internet bandwidth that will be shared among 53 wireless clients and 17 wired clients.
To ensure the wireless network is as secure as possible from common attacks, what security measure can you implement given only the hardware referenced?
- A. 802.1X/EAP-PEAP
- B. WPA2-Enterprise
- C. WPA-Enterprise
- D. WPA2-Personal
Answer: D
Explanation:
Given that only consumer-grade routers are used and no RADIUS server or enterprise infrastructure is mentioned, WPA2-Personal is the most secure option available. It uses a pre-shared key (PSK) for authentication and AES-CCMP for encryption, offering strong protection for small businesses lacking enterprise equipment.
Enterprise methods such as WPA2-Enterprise, 802.1X, and EAP-PEAP require a RADIUS server or authentication backend, which isn't supported in typical consumer-grade routers.
References:
CWSP-208 Study Guide, Chapter 3 (WLAN Security Technologies)
CWNP Wi-Fi Security Deployment Guide for Small Businesses
CWNP E-Learning Modules: WPA2-PSK vs WPA2-Enterprise
NEW QUESTION # 37
Given: ABC Company is deploying an IEEE 802.11-compliant wireless security solution using 802.1X/EAP authentication. According to company policy, the security solution must prevent an eavesdropper from decrypting data frames traversing a wireless connection.
What security characteristics and/or components play a role in preventing data decryption? (Choose 2)
- A. Encrypted Passphrase Protocol (EPP)
- B. Multi-factor authentication
- C. Integrity Check Value (ICV)
- D. Group Temporal Keys
- E. PLCP Cyclic Redundancy Check (CRC)
- F. 4-Way Handshake
Answer: D,F
Explanation:
To prevent data decryption:
B). The 4-Way Handshake derives and installs unique unicast keys (PTKs) on both client and AP.
F). The GTK is used to encrypt broadcast and multicast frames, ensuring group traffic is protected.
Incorrect:
A). Multi-factor authentication enhances identity assurance but not encryption.
C). PLCP CRC checks for transmission errors but does not secure data.
D). EPP is not a valid or recognized encryption protocol.
E). ICV was used in WEP and is cryptographically weak.
References:
CWSP-208 Study Guide, Chapter 3 (Key Hierarchy and 4-Way Handshake)
IEEE 802.11i Standard
NEW QUESTION # 38
Joe's new laptop is experiencing difficulty connecting to ABC Company's 802.11 WLAN using 802.1X/EAP PEAPv0. The company's wireless network administrator assured Joe that his laptop was authorized in the WIPS management console for connectivity to ABC's network before it was given to him. The WIPS termination policy includes alarms for rogue stations, roque APs, DoS attacks and unauthorized roaming.
What is a likely reason that Joe cannot connect to the network?
- A. Joe's integrated 802.11 radio is sending multiple Probe Request frames on each channel.
- B. Joe disabled his laptop's integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.
- C. Joe configured his 802.11 radio card to transmit at 100 mW to increase his SNR. The WIPS is detecting this much output power as a DoS attack.
- D. An ASLEAP attack has been detected on APs to which Joe's laptop was trying to associate. The WIPS responded by disabling the APs.
Answer: B
Explanation:
WIPS systems often enforce policies based on MAC addresses and associated hardware fingerprints. If Joe uses a different wireless adapter than the one authorized, it may trigger a rogue device or unauthorized client alarm-even if it's the same laptop. This behavior is common in environments with strict WIPS enforcement policies.
NEW QUESTION # 39
While seeking the source of interference on channel 11 in your 802.11n WLAN running within 2.4 GHz, you notice a signal in the spectrum analyzer real time FFT display. The signal is characterized with the greatest strength utilizing only 1-2 megahertz of bandwidth and it does not use significantly more bandwidth until it has weakened by roughly 20 dB. At approximately -70 dB, it spreads across as much as 35 megahertz of bandwidth.
What kind of signal is described?
- A. A high-power ultra wideband (UWB) Bluetooth transmission
- B. A high-power, narrowband signal
- C. An HT-OFDM access point
- D. A frequency hopping wireless device in discovery mode
- E. A deauthentication flood from a WIPS blocking an AP
- F. A 2.4 GHz WLAN transmission using transmit beam forming
Answer: B
Explanation:
Spectrum analyzer observations indicate a narrow 1-2 MHz peak with a strong signal, which broadens only when significantly attenuated. This behavior matches a high-powered narrowband interferer (like a microwave ignitor or industrial radio) - not Bluetooth hopping or standard WLAN signals
NEW QUESTION # 40
You are implementing a wireless LAN that will be used by point-of-sale (PoS) systems in a retail environment. Thirteen PoS computers will be installed. To what industry requirement should you ensure you adhere?
- A. HIPAA
- B. PCI-DSS
- C. Directive 8500.01
- D. ISA99
Answer: B
Explanation:
PCI-DSS (Payment Card Industry Data Security Standard) applies to all entities that process, store, or transmit credit card data. Since Point-of-Sale (PoS) systems handle such transactions in retail environments, the wireless network supporting them must comply with PCI-DSS. This includes encrypting wireless transmissions, segmenting network traffic, and implementing WIPS for rogue detection and logging.
References:
CWSP-208 Study Guide, Chapter 3 - WLAN Policy & Regulatory Compliance
CWNP CWSP-208 Objectives: "Industry Standards & Compliance (e.g., PCI-DSS, HIPAA)"
NEW QUESTION # 41
......
CWNP CWSP-208 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
CWSP-208 Premium PDF & Test Engine Files with 122 Questions & Answers: https://validtorrent.prep4pass.com/CWSP-208_exam-braindumps.html
