CWSP-206無料問題集「CWNP CWSP Certified Wireless Security Professional」

質問 1

ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless data. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hotspot include:
- Cannot access corporate network resources
- Network permissions are limited to Internet access
- All stations must be authenticated
What security controls would you suggest? (Choose the single best answer.)

（A）Implement separate controllers for the corporate and guest WLANs.

（B）Require guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.

（C）Use a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.

（D）Force all guest users to use a common VPN protocol to connect.

（E）Configure access control lists (ACLs) on the guest WLAN to control data types and destinations.

正解：B 解答を投票する

質問 2

Which of the following keys are used by the symmetric key algorithm? Each correct answer represents a complete solution. Choose all that apply.

（A）Private Key

（B）Public Key

（C）Group Temporal Key

（D）Pairwise Transient Key

正解：A 解答を投票する

質問 3

Which of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

（A）It is not a valid EAP type.

（B）It does not support a RADIUS server.

（C）It does not support mutual authentication.

（D）It does not support the outer identity.

正解：C 解答を投票する

質問 4

What TKIP feature was introduced to counter the weak integrity check algorithm used in WEP?

（A）Block cipher support

（B）Michael

（C）Sequence counters

（D）32-bit ICV (CRC-32)

（E）RC5 stream cipher

正解：B 解答を投票する

質問 5

As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods.
When writing the 802.11 security policy, what password-related items should be addressed?

（A）MS-CHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.

（B）Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK- based authentication.

（C）Certificates should always be recommended instead of passwords for 802.11 client authentication.

（D）EAP-TLS must be implemented in such scenarios.

（E）Password complexity should be maximized so that weak WEP IV attacks are prevented.

正解：B 解答を投票する

質問 6

Which of the following are attacks/techniques related to Wired Equivalent Privacy (WEP)? Each correct answer represents a complete solution. Choose all that apply.

（A）Baiting

（B）Phishing

（C）Bit-flipping attack

（D）Weak key

正解：C、D 解答を投票する

質問 7

Which of the following security methods can be used to detect the DoS attack in order to enhance the security of the network?

（A）Protocol analyzer

（B）WIPS

（C）Spectrum analyzer

（D）WLAN controller

正解：B 解答を投票する

質問 8

Which of the following are important characteristics of VPNs? Each correct answer represents a complete solution. Choose all that apply.

（A）Authentication

（B）Data integrity

（C）Encryption

（D）Encapsulation

正解：A、B、C、D 解答を投票する

質問 9

Fred works primarily from home and public wireless hotspots rather than commuting to office. He frequently accesses the office network remotely from his Mac laptop using the local 802.11 WLAN. In this remote scenario, what single wireless security practice will provide the greatest security for Fred?

（A）Use WIPS sensor software on the laptop to monitor for risks and attacks.

（B）Use only HTTPS when agreeing to acceptable use terms on public networks.

（C）Use secure protocols, such as FTP, for remote file transfers.

（D）Use enterprise WIPS on the corporate office network.

（E）Use 802.1X/PEAPv0 to connect to the corporate office network from public hotspots.

（F）Use an IPSec VPN for connectivity to the office network.

正解：F 解答を投票する

CWSP-206 無料問題集「CWNP CWSP Certified Wireless Security Professional」

弊社を連絡する

関連リンク

トップ試験