Question 1

You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4-way handshake. Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)

Options :

A : STA1 and STA2 are using different cipher suites.

B : STA2 has retransmissions of EAP frames.

C : STA1 is a reassociation and STA2 is an initial association.

D : STA1 is a TSN, and STA2 is an RSN.

E : STA1 and STA2 are using different EAP types.

Answer: E

Question 2

Given: You are the WLAN administrator in your organization and you are required to monitor the network and ensure all active WLANs are providing RSNs. You have a laptop protocol analyzer configured. In what frame could you see the existence or non-existence of proper RSN configuration parameters for each BSS through the RSN IE?

Options :

A : Probe request

B : Beacon

C : RTS

D : CTS

E : Data frames

Answer: B

Question 3

Given: ABC Company has recently installed a WLAN controller and configured it to support WPA2-Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing, Sales, and Engineering). How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

Options :

A :

The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

B :

The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

C :

The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

D :

The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

Answer: B

Question 4

What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

Options :

A : MAC Spoofing

B : Eavesdropping

C : Hot-spotter

D : Soft AP

E : Deauthentication flood

F : EAP flood

Answer: B

Question 5

What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

Options :

A :

Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.

B :

Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

C :

Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.

D :

The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.

Answer: B

Confidently Practice Online with Free CWSP-208 Exam Cram

Buying Options: