CWSP-206 試験問題を無料オンラインアクセス

In the basic 4-way handshake used in secure 802.11 networks, what is the purpose of the ANonce and SNonce?

• A.They are added together and used as the GMK, from which the GTK is derived.
• B.They are input values used in the derivation of the Pairwise Transient Key.
• C.The IEEE 802.11 standard requires that all encrypted frames contain a nonce to serve as a Message Integrity Check (MIC).
• D.They are used to pad Message 1 and Message 2 so each frame contains the same number of bytes.

ABC Company is deploying an IEEE 802.11-compliant wireless security solution using
802.1X/EAP authentication. According to company policy, the security solution must prevent an eavesdropper from decrypting data frames traversing a wireless connection. What security characteristic and/or component plays a role in preventing data decryption?

• A.Encrypted Passphrase Protocol (EPP)
• B.Integrity Check Value (ICV)
• C.Multi-factor authentication
• D.PLCP Cyclic Redundancy Check (CRC)
• E.4-Way Handshake

Many corporations configure guest VLANs on their WLAN controllers that allow visitors to have Internet access only. The guest traffic is tunneled to the DMZ to prevent some security risks. In this deployment, what risk is still associated with implementing the guest VLAN without any advanced traffic monitoring or filtering feature enabled?

• A.Once guest users are associated to the WLAN, they can capture 802.11 frames from the corporate VLANs.
• B.Intruders can send spam to the Internet through the guest VLAN.
• C.Guest users can reconfigure AP radios servicing the guest VLAN unless unsecure network management protocols (e.g. Telnet, HTTP) are blocked.
• D.Peer-to-peer attacks can still be conducted between guest users unless application-layer monitoring and filtering are implemented.

You are using a utility that takes input and generates random output. For example, you can provide the input of a known word as a secret word and then also provide another known word as salt input. When you process the input it generates a secret code which is a combination of letters and numbers with case sensitivity. For what is the described utility used?

• A.Generating GTKs for broadcast traffic encryption.
• B.Generating dynamic session keys used for IPSec VPNs.
• C.Generating PMKs that can be imported into 802.11 RSN-compatible devices.
• D.Generating passwords for WLAN infrastructure equipment logins.

Which of the following protocols are used to secure a VPN connection? Each correct answer represents a complete solution. Choose all that apply.

• A.TLS
• B.IPSec
• C.L2TP
• D.SSL