Free CWNP CWSP-205 Exam Dumps Questions & Answers

Given: Your network includes a controller-based WLAN architecture with centralized data forwarding. The AP builds an encrypted tunnel to the WLAN controller. The WLAN controller is uplinked to the network via a trunked 1 Gbps Ethernet port supporting all necessary VLANs for management, control, and client traffic.
What processes can be used to force an authenticated WLAN client's data traffic into a specific VLAN as it exits the WLAN controller interface onto the wired uplink? (Choose 3)

• A.During 802.1X authentication, RADIUS sends a return list attribute to the WLAN controller assigning the user and all traffic to a specific VLAN.
• B.On the Ethernet switch that connects to the AP, configure the switch port as an access port (not trunking) in the VLAN of supported clients.
• C.Configure the WLAN controller with static SSID-to-VLAN mappings; the user will be assigned to a VLAN according to the SSID being used.
• D.In the WLAN controller's local user database, create a static username-to-VLAN mapping on the WLAN controller to direct data traffic from a specific user to a designated VLAN.

Select the answer option that arranges the numbered events in the correct time sequence (first to last) for a client associating to a BSS using EAP-PEAPv0/MSCHAPv2.
1.Installation of PTK
2.Initiation of 4-way handshake
3.Open system authentication
4.802.11 association
5.802.1X controlled port is opened for data traffic
6.Client validates server certificate
7.AS validates client credentials

• A.3-4-7-6-5-2-1
• B.4-3-2-7-6-1-5
• C.5-3-4-2-6-7-1
• D.6-1-3-4-2-7-5
• E.3-4-6-7-2-1-5
• F.4-3-5-2-7-6-1

What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

• A.Soft AP
• B.Eavesdropping
• C.EAP flood
• D.MAC Spoofing
• E.Hot-spotter
• F.Deauthentication flood

Given: In XYZ's small business, two autonomous 802.11ac APs and 12 client devices are in use with WPA2-Personal.
What statement about the WLAN security of this company is true?

• A.Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.
• B.A successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client.
• C.An unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic.
• D.An unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user's 4-Way Handshake.
• E.Because WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.

Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.
As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication? (Choose 2)

• A.MS-CHAPv2 uses AES authentication, and is therefore secure.
• B.MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
• C.When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
• D.MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
• E.LEAP's use of MS-CHAPv2 is only secure when combined with WEP.
• F.MS-CHAPv2 is subject to offline dictionary attacks.