IT分野での実力を示す指標として、CWNP Wireless Security Professional (CWSP)は多くの企業から評価されている認定資格です。GoShikenのCWSP-207練習問題122問は、公式の出題範囲に基づいて作成されています。

CWNP CWSP-207 試験概要:

CWNP CWSP-207 試験シラバストピック:

CWSP-207受験者からよく寄せられる質問

CWNP Wireless Security Professional (CWSP) 認定 CWSP-207 試験問題：

問題 #1

Which one of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

A. It does not support a RADIUS server.
B. It does not support mutual authentication.
C. It is not a valid EAP type.
D. It does not support the outer identity.

問題 #2

Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individualshave raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.
As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication? (Choose
2)

A. MS-CHAPv2 uses AES authentication, and is therefore secure.
B. MS-CHAPv2 is subject to offline dictionary attacks.
C. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
D. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.
E. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
F. MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.

問題 #3

Given: ABC Corporation's 802.11 WLAN is comprised of a redundant WLAN controller pair (N+1) and 30 access points implemented in 2004. ABC implemented WEP encryption with IPSec VPN technology to secure their wireless communication because it was the strongest security solution available at the time it was implemented. IT management has decided to upgrade the WLAN infrastructure and implement Voice over Wi-Fi and is concerned with security because most Voice over Wi-Fi phones do not support IPSec.
As the wireless network administrator, what new security solution would be best for protecting ABC's data?

A. Migrate corporate data clients to WPA-Enterprise and segment Voice over Wi-Fi phones by assigning them to a different frequency band.
B. Migrate corporate data and Voice over Wi-Fi devices to WPA2-Enterprise with fast secure roaming support, and segment Voice over Wi-Fi data on a separate VLAN.
C. Migrate all 802.11 data devices to WPA-Personal, and implement a secure DHCP server to allocate addresses from a segmented subnet for the Voice over Wi-Fi phones.
D. Migrate to a multi-factor security solution to replace IPSec; use WEP with MAC filtering, SSID hiding, stateful packet inspection, and VLAN segmentation.

問題 #4

ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism.
As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?

A. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.
B. The WLAN controller is querying the RADIUS server for authentication before the association of STA-1 is moved from one AP to the next.
C. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.
D. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.

問題 #5

Given: You are installing 6 APs on the outside of your facility. They will be mounted at a height of 6 feet.
What must you do to implement these APs in a secure manner beyond the normal indoor AP implementations?
(Choose the single best answer.)

A. Use internal antennas.
B. Ensure proper physical and environmental security using outdoor ruggedized APs or enclosures.
C. User external antennas.
D. Power the APs using PoE.

解説：