Free CWNP CWSP-207 Exam Dumps Questions & Answers

Given: ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless data. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hot-spot include:
* Cannot access corporate network resources
* Network permissions are limited to Internet access
* All stations must be authenticated
What security controls would you suggest? (Choose the single best answer.)

• A.Use a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.
• B.Require guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.
• C.Implement separate controllers for the corporate and guest WLANs.
• D.Force all guest users to use a common VPN protocol to connect.
• E.Configure access control lists (ACLs) on the guest WLAN to control data types and destinations.

Given: You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames):
1) 802.11 Probe Request and 802.11 Probe Response
2) 802.11 Auth and another 802.11 Auth
2) 802.11 Assoc Req and 802.11 Assoc Rsp
4) EAPOL-Start
5) EAP Request and EAP Response
6) EAP Request and EAP Response
7) EAP Request and EAP Response
8) EAP Request and EAP Response
9) EAP Request and EAP Response
10) EAP Success
19) EAPOL-Key (4 frames in a row)
What are you seeing in the capture file? (Choose 4)

• A.802.11 Open System authentication
• B.WPA2-Personal authentication
• C.Active Scanning
• D.Wi-Fi Protected Setup with PIN
• E.WPA2-Enterprise authentication
• F.4-Way Handshake
• G.802.1X with Dynamic WEP

Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11. What kind of troubleshooting are you likely performing with such a tool?

• A.Fast secure roaming problems.
• B.Wireless adapter failure analysis.
• C.Interference source location.
• D.Narrowband DoS attack detection.

You have an AP implemented that functions only using 802.11-2012 standard methods for the WLAN communications on the RF side and implementing multiple SSIDs and profiles on the management side configured as follows:
1. SSID: Guest - VLAN 90 - Security: Open with captive portal authentication - 2 current clients
2. SSID: ABCData - VLAN 10 - Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 5 current clients
3. SSID: ABCVoice - VLAN 60 - Security: WPA2-Personal - 2 current clients Two client STAs are connected to ABCData and can access a media server that requires authentication at the Application Layer and is used to stream multicast video streams to the clients.
What client stations possess the keys that are necessary to decrypt the multicast data packets carrying these videos?

• A.Only the members of the executive team that are part of the multicast group configured on the media server
• B.All clients that are associated to the AP using any SSID
• C.All clients that are associated to the AP using the ABCData SSID
• D.All clients that are associated to the AP with a shared GTK, which includes ABCData and ABCVoice.

In an effort to optimize WLAN performance, ABC Company has upgraded their WLAN infrastructure from
802.11a/g to 802.11n. 802.11a/g clients are still supported and are used throughout ABC's facility. ABC has always been highly security conscious, but due to budget limitations, they have not yet updated their overlay WIPS solution to 802.11n or 802.11ac.
Given ABC's deployment strategy, what security risks would not be detected by the 802.11a/g WIPS?

• A.802.11a STA performing a deauthentication attack against 802.11n APs
• B.802.11n client spoofing the MAC address of an authorized 802.11n client
• C.Rogue AP operating in Greenfield 40 MHz-only mode
• D.Hijacking attack performed by using a rogue 802.11n AP against an 802.11a client