Pass CWNP CWSP-206 PDF Dumps Recently Updated 138 Questions [Q58-Q82]

Rate this post

Pass CWNP CWSP-206 PDF Dumps | Recently Updated 138 Questions

Updated Test Engine to Practice CWSP-206 Dumps & Practice Exam

The CWSP-206 exam consists of multiple-choice questions and covers a broad range of topics related to wireless security. CWSP-206 exam is designed to test your knowledge and skills in wireless security and is an excellent way to assess whether you have the necessary expertise to design, implement and manage secure wireless networks. CWSP-206 exam is challenging and requires significant preparation, but passing it will validate your skills and knowledge in wireless security.

NO.58 What protocol, listed here, allows a network manager to securely administer the network?

TFTP

Telnet

HTTPS

SNMPv2

NO.59 Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

Provide two or more user groups connected to the same SSID with different levels of network privileges.

Allow access to specific files and applications based on the user’s WMM access category.

Allow simultaneous support for multiple EAP types on a single access point.

Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.

NO.60 Your network implements an 802.1X/EAP-based wireless security solution. A WLAN controller is installed and manages seven APs. FreeRADIUS is used for the RADIUS server and is installed on a dedicated server named SRV21. One example client is a MacBook Pro with 8 GB RAM. What device functions as the
802.1X/EAP Authenticator?

WLAN Controller/AP

MacBook Pro

SRV21

RADIUS server

NO.61 Which of the following are attacks/techniques related to Wired Equivalent Privacy (WEP)? Each correct answer represents a complete solution. Choose all that apply.

Bit-flipping attack

Phishing

Weak key

Baiting

NO.62 Which one of the following is not a role defined in the 802.1X authentication procedures used in
802.11 and 802.3 networks for port-based authentication?

AAA Server

Authentication Server

Supplicant

Authenticator

NO.63 A networksecurity auditor is preparing to perform a comprehensive assessment of an 802.11ac network’s security. What task should be performed at the beginning of the audit to maximize the auditor’s ability to expose network vulnerabilities?

Identify the IP subnet information for each network segment.

Identify the manufacturer of the wireless infrastructure hardware.

Identify the skill level of the wireless network security administrator(s).

Identify the manufacturer of the wireless intrusion preventionsystem.

Identify the wireless security solution(s) currently in use.

NO.64 You work as a Network Administrator for Blue Well Inc. The company has a Windows Server
2008 domain based network. All client computers on the network run Windows Vista Ultimate.
Andy, a Finance Manager, uses Windows Mail to download his e-mails to his inbox. He complains that every now and then he gets mails asking for revealing personal or financial information. He wants that such mails are not shown to him.
Which of the following steps will you take to accomplish the task?

Configure phishing filter in Internet Explorer 7.0. Configure it to filter all phishing mails.

Remove domain names of such emails from the Safe Sender’s list.

Configure phishing filter in Windows Mail. Configure it to move such mails to the Junk Mail folder.

Add domain names of such emails in the Block Sender’s list.

NO.65 Which of the following protocols periodically verifies the identity of the client by using a three-way handshake?

CHAP

PAP

PPP

EAP-TLS

NO.66 Which of the following are social engineering techniques? Each correct answer represents a complete solution. Choose all that apply.

Phishing

Baiting

Pretexting

Salami attack

NO.67 Your client has a brand new laptop. He is trying to connect to his home network, which is using an older (802.11b) wireless router. The router is set for encryption but not MAC filtering. What is the most likely problem?

His laptop has a newer operating system that cannot communicate with the router.

His physical address for the laptop is not in the router.

His laptop is using the WPA encryption protocol.

The laptop does not have a wireless NIC.

NO.68 You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMPas an authentication and encryption solution. In this configuration, the wireless network is initially susceptible to what type of attack?

Offline dictionary attacks

Application eavesdropping

Session hijacking

Layer 3 peer-to-peer

Encryption cracking

NO.69 Which of the following keys is derived by Pairwise Master Key (PMK)?

Private Key

Pairwise Transient Key

Public Key

Group Temporal Key

NO.70 While seeking the source of interference on channel 11 in your 802.11n WLAN running within 2.4 GHz, you notice a signal in the spectrum analyzer real time FFT display. The signal is characterized with the greatest strength utilizing only 1-2 megahertz of bandwidth and it does not use significantly more bandwidth until it has weakened by roughly 20 dB. At approximately -70 dB, it spreads across as much as 35 megahertz of bandwidth. What kind of signal is described?

A high-power ultra wideband (UWB) Bluetooth transmission.

A 2.4 GHz WLAN transmission using transmit beam forming.

A high-power, narrowband signal.

A deauthentication flood from a WIPS blocking an AP.

An HT-OFDM access point.

A frequency hopping wireless device in discovery mode.

NO.71 What field in the RSN information element (IE) will indicate whether PSK- or Enterprise-based WPA or WPA2 is in use?

Group Cipher Suite

Pairwise Cipher Suite List

AKM Suite List

RSN Capabilities

NO.72 The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames. In a WPA2-Enterprise network, what process immediately follows the 802.11 association procedure?

802.1X/ EAPauthentication

Group Key Handshake

DHCP Discovery

RADIUS shared secret lookup

4-Way Handshake

Passphrase-to-PSK mapping

NO.73 Which of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

It does not support a RADIUS server.

It is not a valid EAP type.

It does not support mutual authentication.

It does notsupport the outer identity.

NO.74 Which of the following is a computer network that is layered on top of an underlying computer network?

WLAN

RSN

VPN

TSN

NO.75 Which of the following is an application protocol that is used to query and modify data using directory services running over TCP/IP?

LDAP

HTTP

LEAP

RBAC

NO.76 The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames. In a WPA2-Enterprise network, what process immediately follows the
802.11 association procedure?

802.1X/ EAP authentication

Group Key Handshake

DHCP Discovery

RADIUS shared secret lookup

4-Way Handshake

Passphrase-to-PSK mapping

NO.77 Many computer users connect to the Internet at airports, which often have 802.11n access points with a captive portal forauthentication. While using an airport hotspot with this security solution, to what type of wireless attack is a user susceptible?

Wi-Fi phishing

Management interface exploits

UDP port redirection

IGMP snooping

NO.78 Which of the following are the layers of physical security? Each correct answer represents a complete solution. Choose all that apply.

Procedural access control

Video monitor

Environmental design

Intrusion detection system

NO.79 Which of the following would be the most help against Denial of Service (DOS) attacks?

Honey pot

Network surveys.

Packet filtering firewall

Stateful Packet Inspection (SPI) firewall

NO.80 You work as a Network Administrator for NetTech Inc.
The company has a Windows 2003 domain-based network.
The company has a main office and several branch offices.
You want to centralize the administration.
Therefore, you implement a Remote Authentication Dial-In Service (RADIUS) server. Each branch office supports its own Routing and Remote Access Server. You remove the default remote access policy, as you want to secure communications and implement a single policy that requires all dial-up communications to use a 40-bit encryption.
What will you do to accomplish this?
Each correct answer represents a part of the solution. Choose two.

Set the level of encryption to Basic in the remote access policy.

Create a remote access policy on the RADIUS server.

Create a remote access policy on the Routing and Remote Access Server of each branch office.

Set the level of encryption to No Encryption in the remote access policy.

NO.81 After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify the security threats?

Separate security profiles must be defined for network operation in different regulatory domains.

WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.

Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.

Authorized PEAP usernames must be added to the WIPS server’s user database.

NO.82 When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

Server credentials

User credentials

RADIUS shared secret

X.509 certificates