CWSP-206 100% Guarantee Download CWSP-206 Exam PDF Q&A [Jan 16, 2024]
Get CWSP-206 Actual Free Exam Q&As to Prepare for Your CWNP Certification
NEW QUESTION # 39
ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless data. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hotspot include:
* Cannot access corporate network resources
* Network permissions are limited to Internet access
* All stations must be authenticated
What security controls would you suggest? (Choose the single best answer.)
- A. Configure access control lists (ACLs) on the guest WLAN to control data types and destinations.
- B. Force all guest users to use a common VPN protocol to connect.
- C. Implement separate controllers for the corporate and guest WLANs.
- D. Use a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.
- E. Require guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.
Answer: E
NEW QUESTION # 40
What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?
- A. EAP flood
- B. Deauthentication flood
- C. Soft AP
- D. Eavesdropping
- E. MAC Spoofing
- F. Hotspotter
Answer: D
NEW QUESTION # 41
You support a coffee shop and have recently installed a free 802.11ac wireless hotspot for the benefit of your customers. You want to minimize legal risk in the event that the hotspot is used for illegal Internet activity. What option specifies the best approach to minimize legal risk at this public hotspot while maintaining an open venue for customer Internet access?
- A. Implement a captive portal with an acceptable use disclaimer.
- B. Block TCP port 25 and 80 outbound on the Internet router.
- C. Require client STAs to have updated firewall and antivirus software.
- D. Configure WPA2-Enterprise security on the access point.
- E. Use a WIPS to monitor all traffic and deauthenticate malicious stations.
- F. Allow only trusted patrons to use the WLAN.
Answer: A
NEW QUESTION # 42
Which of the following wireless security protocols is defined in IEEE 802.11 pre-RSNA security?
- A. CCMP
- B. TKIP
- C. WEP
- D. EAP
Answer: C
NEW QUESTION # 43
You need to set up a management system on your network.
Which of the following protocols will you use to manage your network?
- A. SNMP
- B. TCP
- C. IP
- D. HTTP
Answer: A
NEW QUESTION # 44
You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity. For what is the described utility used?
- A. Generating PMKs that can be imported into 802.11 RSN-compatible devices.
- B. Generating passwords for WLAN infrastructure equipment logins.
- C. Generating GTKs for broadcast traffic encryption.
- D. Generating dynamic session keys used for IPSec VPNs.
Answer: B
NEW QUESTION # 45
Which of the following protocols uses separate control and data connections between the client and server applications?
- A. HTTP
- B. SCP
- C. SMTP
- D. FTP
Answer: D
NEW QUESTION # 46
The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources. What single WLAN security feature should beimplemented to comply with these requirements?
- A. Captive portal
- B. Mutual authentication
- C. Role-based access control
- D. Group authentication
- E. RADIUS policy accounting
Answer: C
NEW QUESTION # 47
Your client has a brand new laptop. He is trying to connect to his home network, which is using an older (802.11b) wireless router. The router is set for encryption but not MAC filtering. What is the most likely problem?
- A. His laptop has a newer operating system that cannot communicate with the router.
- B. His laptop is using the WPA encryption protocol.
- C. The laptop does not have a wireless NIC.
- D. His physical address for the laptop is not in the router.
Answer: B
NEW QUESTION # 48
ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their widesupport in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations. As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication?
- A. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
- B. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
- C. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.
- D. MS-CHAPv2 uses AES authentication, and is therefore secure.
- E. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
Answer: E
NEW QUESTION # 49
Which of the following are the layers of physical security? Each correct answer represents a complete solution. Choose all that apply.
- A. Environmental design
- B. Procedural access control
- C. Video monitor
- D. Intrusion detection system
Answer: A,B,D
NEW QUESTION # 50
Which of the following types of attacks come under the category of hacker attacks? Each correct answer represents a complete solution. Choose all that apply.
- A. IP address spoofing
- B. Teardrop
- C. Password cracking
- D. Smurf
Answer: A,C
NEW QUESTION # 51
Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?
- A. Allow access tospecific files and applications based on the user's WMM access category.
- B. Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.
- C. Provide two or more user groups connected to the same SSID with different levels of network privileges.
- D. Allow simultaneous support for multiple EAP types on a single access point.
Answer: C
NEW QUESTION # 52
Which of the following features of a switch helps to protect network from MAC flood and MAC spoofing?
- A. Quality of Service (QoS)
- B. Port security
- C. MAC Authentication Bypass
- D. Multi-Authentication
Answer: B
NEW QUESTION # 53
Your organization is using EAP as an authentication framework with a specific type that meets the requirements of your corporate policies. Which one of the following statements is true related to this implementation?
- A. The client STAs may communicate over the controlled port in order to authenticate as soon as the Open System authentication completes.
- B. The client STAs may communicate over the uncontrolled port in order to authenticate as soon as the Open System authentication completes.
- C. The client STAs may use a different, but complementary, EAP type than the AP STAs.
- D. The client will be the authenticator in this scenario.
Answer: B
NEW QUESTION # 54
In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections. XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?
- A. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.
- B. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.
- C. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.
- D. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP.
Answer: B
NEW QUESTION # 55
Which of the following are important characteristics of VPNs? Each correct answer represents a complete solution. Choose all that apply.
- A. Data integrity
- B. Authentication
- C. Encapsulation
- D. Encryption
Answer: A,B,C,D
NEW QUESTION # 56
Which of the following is an application protocol that is used to query and modify data using directory services running over TCP/IP?
- A. RBAC
- B. HTTP
- C. LEAP
- D. LDAP
Answer: D
NEW QUESTION # 57
......
The CWSP-206 exam is ideal for IT professionals who are responsible for designing, implementing, and managing wireless networks. This includes network administrators, security professionals, wireless engineers, and consultants. It is also suitable for individuals who want to enhance their knowledge and skills in wireless network security.
The CWSP-206 certification exam is ideal for individuals who are looking to build a career in wireless networking security. CWSP Certified Wireless Security Professional certification provides a solid foundation in wireless security protocols and prepares individuals for the challenges of securing wireless networks in practical scenarios. CWSP-206 exam is also suitable for professionals who are already working in the field and are looking to enhance their knowledge and skills.
The CWSP-206 exam covers skills in four domains. This certification test will measure the students’ expertise in security policy, security lifecycle management, WLAN security design & architecture, and vulnerabilities, as well as threats, & attacks. The details of these topics and their subtopics are highlighted below:
Security Policy: 10%
- Ensure the appropriate training is performed for each stakeholder on security policies and continuous security awareness.
- Describe the security requirements for WLAN. This entails evaluating and incorporating technical, business, and appropriate regulatory policies, as well as reviewing WLAN infrastructure devices. It also covers one’s skills in involving the relevant stakeholders and reviewing client applications and devices.
- Develop security policies for WLAN. This covers competence in translating the security prerequisites to advanced policy statements and implementing the lifecycle management of security policy. It also entails ensuring the relevant support and approval for all policies and writing policies that conform to common practices.
CWSP-206 Questions Truly Valid For Your CWNP Exam: https://www.exams-boost.com/CWSP-206-valid-materials.html
CWNP Actual Free Exam Questions And Answers: https://drive.google.com/open?id=1zdd2KtEKfHtcxo9p0LjAxYluiL3X91-k