Online Access Free CWSP-207 Practice Test

Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN.
Before creating the WLAN security policy, what should you ensure you possess?

• A.End-user training manuals for the policies to be created
• B.Security policy generation software
• C.Awareness of the exact vendor devices being installed
• D.Management support for the process

When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

• A.Server credentials
• B.X.509 certificates
• C.RADIUS shared secret
• D.User credentials

What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

• A.The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.
• B.The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.
• C.The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.
• D.The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.

Given: The ABC Corporation currently utilizes an enterprise Public Key Infrastructure (PKI) to allow employees to securely access network resources with smart cards. The new wireless network will use WPA2-Enterprise as its primary authentication solution. You have been asked to recommend a Wi-Fi Alliance-tested EAP method.
What solutions will require the least change in how users are currently authenticated and still integrate with their existing PKI?

• A.LEAP
• B.EAP-TLS
• C.PEAPv0/EAP-MSCHAPv2
• D.EAP-FAST
• E.EAP-TTLS/MSCHAPv2
• F.PEAPv0/EAP-TLS

After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify security threats?

• A.WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.
• B.Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.
• C.Authorized PEAP usernames must be added to the WIPS server's user database.
• D.Separate security profiles must be defined for network operation in different regulatory domains