CWSP-207問題集、CWNP実際の試験問題

質問 1

What type of WLAN attack is prevented with the use of a per-MPDU TKIP sequence counter (TSC)?

A. Forgery

B. Bit-flipping

C. Replay

D. Weak-IV

E. Session hijacking

正解: C

質問 2

Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)

A. Social engineering

B. Eavesdropping

C. Rogue APs

D. DoS

正解: A,B

質問 3

Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.
What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

A. All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.

B. The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.

C. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.

D. Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.

E. Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.

正解: C

質問 4

What statements are true about 802.11-2012 Protected Management Frames? (Choose 2)

A. 802.11w frame protection protects against some Layer 2 denial-of-service (DoS) attacks, but it cannot prevent all types of Layer 2 DoS attacks.

B. Authentication, association, and acknowledgment frames are protected if management frame protection is enabled, but deauthentication and disassociation frames are not.

C. When frame protection is in use, the PHY preamble and header as well as the MAC header are encrypted with 256- or 512-bit AES.

D. Management frame protection protects disassociation and deauthentication frames.

正解: A,D

質問 5

Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11. What kind of troubleshooting are you likely performing with such a tool?

A. Wireless adapter failure analysis.

B. Interference source location.

C. Narrowband DoS attack detection.

D. Fast secure roaming problems.

正解: D

質問 6

What is one advantage of using EAP-TTLS instead of EAP-TLS as an authentication mechanism in an 802.11 WLAN?

A. EAP-TTLS sends encrypted supplicant credentials to the authentication server, but EAP-TLS uses unencrypted user credentials.

B. EAP-TTLS does not require the use of a certificate for each STA as authentication credentials, but EAP-TLS does.

C. EAP-TTLS does not require an authentication server, but EAP-TLS does.

D. EAP-TTLS supports client certificates, but EAP-TLS does not.

正解: B

質問 7

The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames. In a WPA2-Enterprise network, what process immediately follows the 802.11 association procedure?

A. 4-Way Handshake

B. RADIUS shared secret lookup

C. Passphrase-to-PSK mapping

D. 802.1X/EAP authentication

E. Group Key Handshake

F. DHCP Discovery

正解: D

質問 8

Given: Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a dedicated server named SRV21. One example client is a MacBook Pro with 8 GB RAM.
What device functions as the 802.1X/EAP Authenticator?

A. SRV21

B. WLAN Controller/AP

C. RADIUS server

D. MacBook Pro

正解: B

質問 9

Given: The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources.
What single WLAN security feature should be implemented to comply with these requirements?

A. Group authentication

B. Role-based access control

C. Mutual authentication

D. Captive portal

E. RADIUS policy accounting

正解: B

質問 10

A WLAN is implemented using WPA-Personal and MAC filtering.
To what common wireless network attacks is this network potentially vulnerable? (Choose 3)

A. MAC Spoofing

B. ASLEAP

C. Offline dictionary attacks

D. DoS

正解: A,C,D

CWNP Wireless Security Professional (CWSP) - CWSP-207 模擬練習