Online Access Free CWSP-208 Practice Test

Given: When the CCMP cipher suite is used for protection of data frames, 16 bytes of overhead are added to the Layer 2 frame. 8 of these bytes comprise the MIC.
What purpose does the encrypted MIC play in protecting the data frame?

• A.The MIC provides for a cryptographic integrity check against the data payload to ensure that it matches the original transmitted data.
• B.The MIC is used as a first layer of validation to ensure that the wireless receiver does not incorrectly process corrupted signals.
• C.The MIC is a hash computation performed by the receiver against the MAC header to detect replay attacks prior to processing the encrypted payload.
• D.The MIC is a random value generated during the 4-way handshake and is used for key mixing to enhance the strength of the derived PTK.

Wireless Intrusion Prevention Systems (WIPS) provide what network security services? (Choose 2)

• A.Wireless vulnerability assessment
• B.Policy enforcement and compliance management
• C.Configuration distribution for autonomous APs
• D.Application-layer traffic inspection
• E.Analysis and reporting of AP CPU utilization

The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames. In a WPA2-Enterprise network, what process immediately follows the 802.11 association procedure?

• A.RADIUS shared secret lookup
• B.4-Way Handshake
• C.Passphrase-to-PSK mapping
• D.Group Key Handshake
• E.802.1X/EAP authentication
• F.DHCP Discovery

Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN.
Before creating the WLAN security policy, what should you ensure you possess?

• A.Management support for the process
• B.Security policy generation software
• C.End-user training manuals for the policies to be created
• D.Awareness of the exact vendor devices being installed

As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods.
When writing the 802.11 security policy, what password-related items should be addressed?

• A.Certificates should always be recommended instead of passwords for 802.11 client authentication.
• B.Password complexity should be maximized so that weak WEP IV attacks are prevented.
• C.Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.
• D.EAP-TLS must be implemented in such scenarios.
• E.MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.