CWSP-206無料問題集「CWNP CWSP Certified Wireless Security Professional」

質問 1

Which of the following attacks are considered as authentication attacks? Each correct answer represents a complete solution. Choose all that apply.

（A）Eavesdropper attack

（B）Man-in-the-middle attack

（C）Jamming attack

（D）Denial-of-Service (DoS) attack

正解：A、B 解答を投票する

質問 2

The IEEE 802.11 Pairwise Transient Key (PTK) is derived from what cryptographic element?

（A）Group Master Key (GMK)

（B）Group Temporal Key (GTK)

（C）Pairwise Master Key (PMK)

（D）Key Confirmation Key (KCK)

（E）PeerKey (PK)

（F）Phase Shift Key (PSK)

正解：C 解答を投票する

質問 3

Peter works as a Network Administrator for the uCertify Inc. The company has a Windows-based network. All client computers run the Windows XP operating system. The employees of the company complain that suddenly all of the client computers have started working slowly. Peter finds that a malicious hacker is attempting to slow down the computers by flooding the network with a large number of requests. Which of the following attacks is being implemented by the malicious hacker?

（A）SQL injection attack

（B）Man-in-the-middle attack

（C）Buffer overflow attack

（D）Denial-of-Service (DoS) attack

正解：D 解答を投票する

質問 4

Which of the following attacks on wireless LAN is performed to shut down the wireless network?

（A）Man-in-the-middle attack

（B）Passive attack

（C）Active attack

（D）Jamming attack

正解：D 解答を投票する

質問 5

Which of the following keys are used by the public key infrastructure (PKI)? Each correct answer represents a complete solution. Choose all that apply.

（A）Private Key

（B）Public Key

（C）Group Temporal Key

（D）Pairwise Transient Key

正解：A、B 解答を投票する

質問 6

In the basic 4-way handshake used in secure 802.11 networks, what is the purpose of the ANonce and SNonce?

（A）They are added together and used as the GMK, from which the GTK is derived.

（B）The IEEE 802.11 standard requires that all encrypted frames contain a nonce to serve as a Message Integrity Check (MIC).

（C）They are used to pad Message 1 and Message 2 so each frame contains the same number of bytes.

（D）They are input values used in the derivation of the Pairwise Transient Key.

正解：D 解答を投票する

質問 7

You are the WLAN administrator in your organization and you are required to monitor the network and ensure all active WLANs are providing RSNs. You have a laptop protocol analyzer configured. In what frame could you see the existence or non-existence of proper RSN configuration parameters for each BSS through the RSN IE?

（A）Probe request

（B）CTS

（C）Data frames

（D）RTS

（E）Beacon

正解：E 解答を投票する

質問 8

XYZ Hospital plans to improve the security and performance of their Voice over Wi-Fi implementation and will be upgrading to 802.11n phones with 802.1X/EAP authentication. XYZ would like to support fast secure roaming for the phones and will require the ability to troubleshoot reassociations that are delayed or dropped during inter-channel roaming. What portable solution would be recommended for XYZ to troubleshoot roaming problems?

（A）Spectrum analyzer software installed on a laptop computer.

（B）An autonomous AP mounted on a mobile cart and configured to operate in monitor mode.

（C）WIPS sensor software installed on a laptop computer.

（D）Laptop-based protocol analyzer with multiple 802.11n adapters.

正解：D 解答を投票する

質問 9

Which of the following are NOT steps in securing your wireless connection? Each correct answer represents a complete solution. Choose two.

（A）Strong password policies on workstations.

（B）Not broadcasting SSID

（C）MAC filtering on the router

（D）Using either WEP or WPA encryption

（E）Hardening the server OS

正解：A、E 解答を投票する

質問 10

The Aircrack-ng WLAN software tool can capture and transmit modified 802.11 frames over the wireless network. It comes pre-installed on Kali Linux and some other Linux distributions. Which one of the following would not be a suitable penetration testing action taken with this tool?

（A）Auditing the configuration and functionality of a WIPS by simulating common attack sequences.

（B）Cracking the authentication or encryption processes implemented poorly in some WLANs.

（C）Transmitting a deauthentication frame to disconnect a user from the AP.

（D）Probing the RADIUS server and authenticator to expose the RADIUS shared secret.

正解：D 解答を投票する

CWSP-206 無料問題集「CWNP CWSP Certified Wireless Security Professional」

弊社を連絡する

関連リンク

トップ試験