Online Access Free CWSP-207 Practice Test

Given: Your network includes a controller-based WLAN architecture with centralized data forwarding. The AP builds an encrypted tunnel to the WLAN controller. The WLAN controller is uplinked to the network via a trunked 1 Gbps Ethernet port supporting all necessary VLANs for management, control, and client traffic.
What processes can be used to force an authenticated WLAN client's data traffic into a specific VLAN as it exits the WLAN controller interface onto the wired uplink? (Choose 3)

• A.Configure the WLAN controller with static SSID-to-VLAN mappings; the user will be assigned to a VLAN according to the SSID being used.
• B.In the WLAN controller's local user database, create a static username-to-VLAN mapping on the WLAN controller to direct data traffic from a specific user to a designated VLAN.
• C.During 802.1X authentication, RADIUS sends a return list attribute to the WLAN controller assigning the user and all traffic to a specific VLAN.
• D.On the Ethernet switch that connects to the AP, configure the switch port as an access port (not trunking) in the VLAN of supported clients.

In the IEEE 802.11-2012 standard, what is the purpose of the 802.1X Uncontrolled Port?

• A.To block authentication traffic until the 4-Way Handshake completes
• B.To block unencrypted user traffic after a 4-Way Handshake completes
• C.To allow only authentication frames to flow between the Supplicant and Authentication Server
• D.To pass general data traffic after the completion of 802.11 authentication and key management

In an effort to optimize WLAN performance, ABC Company has upgraded their WLAN infrastructure from
802.11a/g to 802.11n. 802.11a/g clients are still supported and are used throughout ABC's facility. ABC has always been highly security conscious, but due to budget limitations, they have not yet updated their overlay WIPS solution to 802.11n or 802.11ac.
Given ABC's deployment strategy, what security risks would not be detected by the 802.11a/g WIPS?

• A.802.11n client spoofing the MAC address of an authorized 802.11n client
• B.Rogue AP operating in Greenfield 40 MHz-only mode
• C.Hijacking attack performed by using a rogue 802.11n AP against an 802.11a client
• D.802.11a STA performing a deauthentication attack against 802.11n APs

What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

• A.EAP flood
• B.Soft AP
• C.MAC Spoofing
• D.Eavesdropping
• E.Hot-spotter
• F.Deauthentication flood

In what deployment scenarios would it be desirable to enable peer-to-peer traffic blocking?

• A.At public hot-spots in which many clients use diverse applications
• B.In university environments using multicast video training sourced from professor's laptops
• C.In home networks in which file and printer sharing is enabled
• D.In corporate Voice over Wi-Fi networks with push-to-talk multicast capabilities