Free CWNP CWSP-208 Exam Dumps Questions & Answers

What wireless authentication technologies may build a TLS tunnel between the supplicant and the authentication server before passing client authentication credentials to the authentication server? (Choose 3)

• A.EAP-TLS
• B.LEAP
• C.EAP-TTLS
• D.EAP-MD5
• E.PEAPv0/MSCHAPv2

What is one advantage of using EAP-TTLS instead of EAP-TLS as an authentication mechanism in an 802.11 WLAN?

• A.EAP-TTLS supports client certificates, but EAP-TLS does not.
• B.EAP-TTLS does not require the use of a certificate for each STA as authentication credentials, but EAP- TLS does.
• C.EAP-TTLS sends encrypted supplicant credentials to the authentication server, but EAP-TLS uses unencrypted user credentials.
• D.EAP-TTLS does not require an authentication server, but EAP-TLS does.

Given: ABC Company has 20 employees and only needs one access point to cover their entire facility. Ten of ABC Company's employees have laptops with radio cards capable of only WPA security. The other ten employees have laptops with radio cards capable of WPA2 security. The network administrator wishes to secure all wireless communications (broadcast and unicast) for each laptop with its strongest supported security mechanism, but does not wish to implement a RADIUS/AAA server due to complexity.
What security implementation will allow the network administrator to achieve this goal?

• A.Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCMP.
• B.Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect.
• C.Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect.
• D.Implement two separate SSIDs on the AP-one for WPA-Personal using TKIP and one for WPA2- Personal using AES-CCMP.

What security vulnerabilities may result from a lack of staging, change management, and installation procedures for WLAN infrastructure equipment? (Choose 2)

• A.WIPS may not classify authorized, rogue, and neighbor APs accurately
• B.AES-CCMP encryption keys may be decrypted
• C.The WLAN system may be open to RF Denial-of-Service attacks
• D.Management interface exploits due to the use of default usernames and passwords for AP management
• E.Authentication cracking of 64-bit Hex WPA-Personal PSK

Which one of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

• A.It does not support mutual authentication.
• B.It does not support a RADIUS server.
• C.It does not support the outer identity.
• D.It is not a valid EAP type.