Free CWNP CWSP-206 Exam Dumps Questions & Answers

Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

• A.Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.
• B.Provide two or more user groups connected to the same SSID with different levels of network privileges.
• C.Allow simultaneous support for multiple EAP types on a single access point.
• D.Allow access to specific files and applications based on the user's WMM access category.

Fred works primarily from home and public wireless hotspots rather than commuting to office. He frequently accesses the office network remotely from his Mac laptop using the local 802.11 WLAN. In this remote scenario, what single wireless security practice will provide the greatest security for Fred?

• A.Use an IPSec VPN for connectivity to the office network.
• B.Use WIPS sensor software on the laptop to monitor for risks and attacks.
• C.Use 802.1X/PEAPv0 to connect to the corporate office network from public hotspots.
• D.Use enterprise WIPS on the corporate office network.
• E.Use secure protocols, such as FTP, for remote file transfers.
• F.Use only HTTPS when agreeing to acceptable use terms on public networks.

XYZ Company has recently installed a controller-based WLAN and is using a RADIUS server to query authentication requests to an LDAP server. XYZ maintains user-based access policies and would like to use the RADIUS server to facilitate network authorization. What RADIUS feature could be used by XYZ to assign the proper network permissions to users during authentications?

• A.The RADIUS server can support vendor-specific attributes in the ACCESS-ACCEPT response, which can be used for user policy assignment.
• B.RADIUS can send a DO-NOT-AUTHORIZE demand to the authenticator to prevent the STA from gaining access to specific files, but may only employ this in relation to Linux servers.
• C.RADIUS can reassign a client's 802.11 association to a new SSID by referencing a username-to- SSID mapping table in the LDAP user database.
• D.The RADIUS server can communicate with the DHCP server to issue the appropriate IP address and VLAN assignment to users.

A WLAN consultant has just finished installing a WLAN controller with 15 controller-based APs.
Two SSIDs with separate VLANs are configured for this network, and both VLANs are configured to use the same RADIUS server. The SSIDs are configured as follows:
1. SSID Blue - VLAN 10 - Lightweight EAP (LEAP) authentication - CCMP
cipher suite
2. SSID Red - VLAN 20 - PEAPv0/EAP-TLS authentication - TKIP cipher
suite
The consultant's computer can successfully authenticate and browse the Internet when using the Blue SSID. The same computer cannot authenticate when using the Red SSID. What is a possible cause of the problem?

• A.The Red VLAN does not use server certificate, but the client requires one.
• B.The TKIP cipher suite is not a valid option for PEAPv0 authentication.
• C.The consultant does not have a valid Kerberos ID on the Blue VLAN.
• D.The client does not have a proper certificate installed for the tunneled authentication within the established TLS tunnel.

Which of the following are attacks/techniques related to Wired Equivalent Privacy (WEP)? Each correct answer represents a complete solution. Choose all that apply.

• A.Bit-flipping attack
• B.Weak key
• C.Baiting
• D.Phishing