Choose CWSP-208 most accurate study material

What wireless authentication technologies may build a TLS tunnel between the supplicant and the authentication server before passing client authentication credentials to the authentication server? (Choose 3)

• A. EAP-TLS
• B. PEAPv0/MSCHAPv2
• C. EAP-TTLS
• D. EAP-MD5
• E. LEAP

In an effort to optimize WLAN performance, ABC Company has upgraded their WLAN infrastructure from 802.11a/g to 802.11n. 802.11a/g clients are still supported and are used throughout ABC's facility. ABC has always been highly security conscious, but due to budget limitations, they have not yet updated their overlay WIPS solution to 802.11n or 802.11ac. Given ABC's deployment strategy, what security risks would not be detected by the 802.11a/g WIPS?

• A. Hijacking attack performed by using a rogue 802.11n AP against an 802.11a client
• B. Rogue AP operating in Greenfield 40 MHz-only mode
• C. 802.11a STA performing a deauthentication attack against 802.11n APs
• D. 802.11n client spoofing the MAC address of an authorized 802.11n client

What security benefits are provided by endpoint security solution software? (Choose 3)

• A. Can collect statistics about a user's network use and monitor network threats while they are connected
• B. Can prevent connections to networks with security settings that do not conform to company policy
• C. Can be used to monitor for and prevent network attacks by nearby rogue clients or APs
• D. Can restrict client connections to networks with specific SSIDs and encryption types

Given: ABC Corporation's 802.11 WLAN is comprised of a redundant WLAN controller pair (N+1) and 30 access points implemented in 2004. ABC implemented WEP encryption with IPSec VPN technology to secure their wireless communication because it was the strongest security solution available at the time it was implemented. IT management has decided to upgrade the WLAN infrastructure and implement Voice over Wi-Fi and is concerned with security because most Voice over Wi-Fi phones do not support IPSec. As the wireless network administrator, what new security solution would be best for protecting ABC's data?

• A. Migrate corporate data and Voice over Wi-Fi devices to WPA2-Enterprise with fast secure roaming support, and segment Voice over Wi-Fi data on a separate VLAN.
• B. Migrate corporate data clients to WPA-Enterprise and segment Voice over Wi-Fi phones by assigning them to a different frequency band.
• C. Migrate all 802.11 data devices to WPA-Personal, and implement a secure DHCP server to allocate addresses from a segmented subnet for the Voice over Wi-Fi phones.
• D. Migrate to a multi-factor security solution to replace IPSec; use WEP with MAC filtering, SSID hiding, stateful packet inspection, and VLAN segmentation.

A single AP is configured with three separate WLAN profiles, as follows:
1. SSID: ABCData - BSSID: 00:11:22:00:1F:C3 - VLAN 10 - Security:
PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 3 current clients
2. SSID: ABCVoice - BSSID: 00:11:22:00:1F:C4 - VLAN 60 - Security:
WPA2-Personal with AES-CCMP - 2 current clients
3. SSID: Guest - BSSID: 00:11:22:00:1F:C5 - VLAN 90 - Security: Open
with captive portal authentication - 3 current clients
Three STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.
How many unique GTKs and PTKs are currently in place in this scenario?

• A. 3 GTKs ?8 PTKs
• B. 1 GTK ?8 PTKs
• C. 2 GTKs ?8 PTKs
• D. 2 GTKs ?5 PTKs