CWSP-207 試験問題を無料オンラインアクセス

Given: Mary has just finished troubleshooting an 802.11g network performance problem using a laptop-based WLAN protocol analyzer. The wireless network implements 802.1X/PEAP and the client devices are authenticating properly. When Mary disables the WLAN protocol analyzer, configures her laptop for PEAP authentication, and then tries to connect to the wireless network, she is unsuccessful. Before using the WLAN protocol analyzer, Mary's laptop connected to the network without any problems.
What statement indicates why Mary cannot access the network from her laptop computer?

• A.The protocol analyzer's network interface card (NIC) drivers are still loaded and do not support the version of PEAP being used.
• B.The nearby WIPS sensor categorized Mary's protocol analyzer adapter as a threat and is performing a deauthentication flood against her computer.
• C.Mary's supplicant software is using PEAPv0/EAP-MSCHAPv2, and the access point is using PEAPv1/EAP-GTC.
• D.The PEAP client's certificate was voided when the protocol analysis software assumed control of the wireless adapter.

Given: You support a coffee shop and have recently installed a free 802.11ac wireless hot-spot for the benefit of your customers. You want to minimize legal risk in the event that the hot-spot is used for illegal Internet activity.
What option specifies the best approach to minimize legal risk at this public hot-spot while maintaining an open venue for customer Internet access?

• A.Allow only trusted patrons to use the WLAN
• B.Require client STAs to have updated firewall and antivirus software
• C.Block TCP port 25 and 80 outbound on the Internet router
• D.Use a WIPS to monitor all traffic and deauthenticate malicious stations
• E.Implement a captive portal with an acceptable use disclaimer
• F.Configure WPA2-Enterprise security on the access point

What type of WLAN attack is prevented with the use of a per-MPDU TKIP sequence counter (TSC)?

• A.Forgery
• B.Weak-IV
• C.Bit-flipping
• D.Replay
• E.Session hijacking

Given: A WLAN protocol analyzer trace reveals the following sequence of frames (excluding the ACK frames):
1) 802.11 Probe Req and 802.11 Probe Rsp
2) 802.11 Auth and then another 802.11 Auth
3) 802.11 Assoc Req and 802.11 Assoc Rsp
4) EAPOL-KEY
5) EAPOL-KEY
6) EAPOL-KEY
7) EAPOL-KEY
What security mechanism is being used on the WLAN?

• A.EAP-TLS
• B.802.1X/LEAP
• C.WEP-128
• D.WPA2-Personal
• E.WPA-Enterprise

Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.
What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

• A.The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.
• B.Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.
• C.All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.
• D.Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.
• E.Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.