Question 1

As a part of a large organization’s security policy, how should a wireless security professional address the problem of rogue access points?

Options :

A :

Use a WPA2-Enterprise compliant security solution with strong mutual authentication and encryption for network access of corporate devices.

B :

Hide the SSID of all legitimate APs on the network so that intruders cannot copy this parameter on rogue APs.

C : Conduct thorough manual facility scans with spectrum analyzers to detect rogue AP RF signatures.

D : A trained employee should install and configure a WIPS for rogue detection and response measures.

E : Enable port security on Ethernet switch ports with a maximum of only 3 MAC addresses on each port.

Answer: D

Question 2

What preventative measures are performed by a WIPS against intrusions?

Options :

A : EAPoL Reject frame flood against a rogue AP

B : Evil twin attack against a rogue AP

C : Deauthentication attack against a classified neighbor AP

D : ASLEAP attack against a rogue AP

E : Uses SNMP to disable the switch port to which rogue APs connect

Answer: E

Question 3

Given: You are the WLAN administrator in your organization and you are required to monitor the network and ensure all active WLANs are providing RSNs. You have a laptop protocol analyzer configured. In what frame could you see the existence or non-existence of proper RSN configuration parameters for each BSS through the RSN IE?

Options :

A : Probe request

B : Beacon

C : RTS

D : CTS

E : Data frames

Answer: B

Question 4

What attack cannot be detected by a Wireless Intrusion Prevention System (WIPS)?

Options :

A : MAC Spoofing

B : Eavesdropping

C : Hot-spotter

D : Soft AP

E : Deauthentication flood

F : EAP flood

Answer: B

Question 5

What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

Options :

A :

Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.

B :

Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

C :

Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.

D :

The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.

Answer: B

Confidently Practice Online with Free CWSP-208 Exam Cram

Buying Options: