CWSP-208 試験問題を無料オンラインアクセス

Wireless Intrusion Prevention Systems (WIPS) provide what network security services? (Choose 2)

• A.Policy enforcement and compliance management
• B.Wireless vulnerability assessment
• C.Application-layer traffic inspection
• D.Analysis and reporting of AP CPU utilization
• E.Configuration distribution for autonomous APs

Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN.
Before creating the WLAN security policy, what should you ensure you possess?

• A.Management support for the process
• B.End-user training manuals for the policies to be created
• C.Security policy generation software
• D.Awareness of the exact vendor devices being installed

After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify security threats?

• A.Authorized PEAP usernames must be added to the WIPS server's user database.
• B.WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.
• C.Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.
• D.Separate security profiles must be defined for network operation in different regulatory domains

What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

• A.Eavesdropping
• B.MAC Spoofing
• C.Hot-spotter
• D.Soft AP
• E.Deauthentication flood
• F.EAP flood

Given: You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution.
In this configuration, the wireless network is initially susceptible to what type of attacks? (Choose 2)

• A.Layer 3 peer-to-peer
• B.Session hijacking
• C.Layer 1 DoS
• D.Offline dictionary attacks
• E.Encryption cracking
• F.Application eavesdropping