CWSP-208 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
When implementing a WPA2-Enterprise security solution, what protocol must the selected RADIUS server support?

A.LWAPP, GRE, or CAPWAP
B.IPSec/ESP
C.EAP
D.CCMP and TKIP
E.LDAP

正解:

Question No : 2
When used as part of a WLAN authentication solution, what is the role of LDAP?

A.A data retrieval protocol used by an authentication service such as RADIUS
B.An IEEE
C.500 standard compliant database that participates in the 802.1X port-based access control process
D.A SQL compliant authentication service capable of dynamic key generation and distribution
E.A role-based access control protocol for filtering data to/from authenticated stations.
F.An Authentication Server (AS) that communicates directly with, and provides authentication for, the Supplicant.

正解:

Question No : 3
Given: You are using WEP as an encryption solution. You are using VLANs for network segregation.
Why can you not establish an RSNA?

A.RSNA connections require TKIP or CCM
B.RSNA connections require BIP and do not support TKIP, CCMP or WE
C.RSNA connections require CCMP and do not support TKIP or WE
D.RSNA connections do not work in conjunction with VLANs.

正解:

Question No : 4
What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?

A.Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.
B.EAP-TLS does not protect the client's username and password inside an encrypted tunnel.
C.EAP-TLS cannot establish a secure tunnel for internal EAP authentication.
D.EAP-TLS is supported only by Cisco wireless infrastructure and client devices.
E.EAP-TLS requires extensive PKI use to create
F.509 certificates for both the server and all clients, which increases administrative overhead.

正解:

Question No : 5
Given: ABC Company has 20 employees and only needs one access point to cover their entire facility. Ten of ABC Company’s employees have laptops with radio cards capable of only WPA security. The other ten employees have laptops with radio cards capable of WPA2 security. The network administrator wishes to secure all wireless communications (broadcast and unicast) for each laptop with its strongest supported security mechanism, but does not wish to implement a RADIUS/AAA server due to complexity.
What security implementation will allow the network administrator to achieve this goal?

A.Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect.
B.Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect.
C.Implement two separate SSIDs on the AP―one for WPA-Personal using TKIP and one for WPA2-Personal using AES-CCM
D.Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCM

正解:

Question No : 6
What wireless security protocol provides mutual authentication without using an X.509 certificate?

A.EAP-FAST
B.EAP-MD5
C.EAP-TLS
D.PEAPv0/EAP-MSCHAPv2
E.EAP-TTLS
F.PEAPv1/EAP-GTC

正解:

Question No : 7
Given: An 802.1X/EAP implementation includes an Active Directory domain controller running Windows Server 2012 and an AP from a major vendor. A Linux server is running RADIUS and it queries the domain controller for user credentials. A Windows client is accessing the network.
What device functions as the EAP Supplicant?

A.Linux server
B.Windows client
C.Access point
D.Windows server
E.An unlisted switch
F.An unlisted WLAN controller

正解:

Question No : 8
In the IEEE 802.11-2012 standard, what is the purpose of the 802.1X Uncontrolled Port?

A.To allow only authentication frames to flow between the Supplicant and Authentication Server
B.To block authentication traffic until the 4-Way Handshake completes
C.To pass general data traffic after the completion of 802.11 authentication and key management
D.To block unencrypted user traffic after a 4-Way Handshake completes

正解:

Question No : 9
What statement accurately describes the functionality of the IEEE 802.1X standard?

A.Port-based access control with EAP encapsulation over the LAN (EAPoL)
B.Port-based access control with dynamic encryption key management and distribution
C.Port-based access control with support for authenticated-user VLANs only
D.Port-based access control with mandatory support of AES-CCMP encryption
E.Port-based access control, which allows three frame types to traverse the uncontrolled port: EAP, DHCP, and DN

正解:

Question No : 10
Given: The ABC Corporation currently utilizes an enterprise Public Key Infrastructure (PKI) to allow employees to securely access network resources with smart cards. The new wireless network will use WPA2-Enterprise as its primary authentication solution. You have been asked to recommend a Wi-Fi Alliance-tested EAP method.
What solutions will require the least change in how users are currently authenticated and still integrate with their existing PKI?

A.EAP-FAST
B.EAP-TLS
C.PEAPv0/EAP-MSCHAPv2
D.LEAP
E.PEAPv0/EAP-TLS
F.EAP-TTLS/MSCHAPv2

正解:

Question No : 11
Given: ABC Corporation’s 802.11 WLAN is comprised of a redundant WLAN controller pair (N+1) and 30 access points implemented in 2004. ABC implemented WEP encryption with IPSec VPN technology to secure their wireless communication because it was the strongest security solution available at the time it was implemented. IT management has decided to upgrade the WLAN infrastructure and implement Voice over Wi-Fi and is concerned with security because most Voice over Wi-Fi phones do not support IPSec.
As the wireless network administrator, what new security solution would be best for protecting ABC’s data?

A.Migrate corporate data clients to WPA-Enterprise and segment Voice over Wi-Fi phones by assigning them to a different frequency band.
B.Migrate corporate data and Voice over Wi-Fi devices to WPA2-Enterprise with fast secure roaming support, and segment Voice over Wi-Fi data on a separate VLA
C.Migrate to a multi-factor security solution to replace IPSec; use WEP with MAC filtering, SSID hiding, stateful packet inspection, and VLAN segmentation.
D.Migrate all 802.11 data devices to WPA-Personal, and implement a secure DHCP server to allocate addresses from a segmented subnet for the Voice over Wi-Fi phones.

正解:

Question No : 12
You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4-way handshake.
Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)

A.STA1 and STA2 are using different cipher suites.
B.STA2 has retransmissions of EAP frames.
C.STA1 is a reassociation and STA2 is an initial association.
D.STA1 is a TSN, and STA2 is an RS
E.STA1 and STA2 are using different EAP types.

正解:

Question No : 13
While performing a manual scan of your environment using a spectrum analyzer on a laptop computer, you notice a signal in the real time FFT view. The signal is characterized by having peak power centered on channel 11 with an approximate width of 20 MHz at its peak. The signal widens to approximately 40 MHz after it has weakened by about 30 dB.
What kind of signal is displayed in the spectrum analyzer?

A.A frequency hopping device is being used as a signal jammer in 5 GHz
B.A low-power wideband RF attack is in progress in 2.4 GHz, causing significant 802.11 interference
C.An 802.11g AP operating normally in 2.4 GHz
D.An 802.11a AP operating normally in 5 GHz

正解:

Question No : 14
What wireless authentication technologies may build a TLS tunnel between the supplicant and the authentication server before passing client authentication credentials to the authentication server? (Choose 3)

A.EAP-MD5
B.EAP-TLS
C.LEAP
D.PEAPv0/MSCHAPv2
E.EAP-TTLS

正解:

Question No : 15
What is one advantage of using EAP-TTLS instead of EAP-TLS as an authentication mechanism in an 802.11 WLAN?

A.EAP-TTLS sends encrypted supplicant credentials to the authentication server, but EAP-TLS uses unencrypted user credentials.
B.EAP-TTLS supports client certificates, but EAP-TLS does not.
C.EAP-TTLS does not require an authentication server, but EAP-TLS does.
D.EAP-TTLS does not require the use of a certificate for each STA as authentication credentials, but EAP-TLS does.

正解:

CWNP CWSP-208 問題練習