CWSP-208試験無料問題集（198題）「CWNP Certified Wireless Security Professional (CWSP) 認定」

出題：1

When TKIP is selected as the pairwise cipher suite, what frame types may be protected with data confidentiality? (Choose 2)

A. Control

B. Data

C. Robust broadcast management

D. Robust unicast management

E. ACK

F. QoS Data

正解：B,F 解答を投票する

出題：2

EAP-SIM is most commonly associated with which device type?

A. Cellular phones

B. Point of Sale devices

C. Laptops

D. Voice enabled barcode scanners

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

In the IEEE 802.11-2012 standard, what is the purpose of the 802.1X Uncontrolled Port?

A. To allow only authentication frames to flow between the Supplicant and Authentication Server

B. To block unencrypted user traffic after a 4-Way Handshake completes

C. To pass general data traffic after the completion of 802.11 authentication and key management

D. To block authentication traffic until the 4-Way Handshake completes

正解：A 解答を投票する

出題：4

When an attacker uses an AP with the same SSID or BSSID as your production network, what type of attack are they conducting?

A. Evil Twin

B. Eavesdropping

C. Brute force

D. ARP poisoning

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

A. The PMK is generated from a successful mutual EAP authentication. When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake.

B. After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK, is derived from the AAA key and is hashed with the PMK to create the PTK and GTK.

C. The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK.
The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.

D. If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user's passphrase. The PMK is then used during the 4-way handshake to create data encryption keys.

正解：C 解答を投票する

出題：6

Which wireless security method allows devices to connect using an encrypted channel, even on open networks?

A. 802.1X EAP

B. WPA2 with TKIP

C. WPA3 OWE (Opportunistic Wireless Encryption)

D. WPA2 PSK

正解：C 解答を投票する

出題：7

Select the answer option that arranges the numbered events in the correct time sequence (first to last) for a client associating to a BSS using EAP-PEAPv0/MSCHAPv2.
1. Installation of PTK
2. Initiation of 4-way handshake
3. Open system authentication
4. 802.11 association
5. 802.1X controlled port is opened for data traffic
6. Client validates server certificate
7. AS validates client credentials

A. 4--3--5--2--7--6--1

B. 5--3--4--2--6--7--1

C. 4--3--2--7--6--1--5

D. 3--4--7--6--5--2--1

E. 6--1--3--4--2--7--5

F. 3--4--6--7--2--1--5

正解：F 解答を投票する

出題：8

If you have a statement in your firewall configuration of allow at the top of the rules list, what will happen?

A. Any traffic not specifically denied below that statement will be allowed.

B. Any traffic will be allowed unless it is destined for the management port.

C. All traffic from all sources will be allowed to all destinations.

D. Any traffic specifically allowed below that statement will be denied.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

A. Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.

B. Allow simultaneous support for multiple EAP types on a single access point.

C. Allow access to specific files and applications based on the user's WMM access category.

D. Provide two or more user groups connected to the same SSID with different levels of network privileges.

正解：D 解答を投票する

出題：10

Which wireless security method inherently provides fast secure transition between access points, usually takes less than 50 ms to complete, and establishes a robust secure network association (RSNA)?

A. Protected EAP

B. Transport layer security

C. Preshared key

D. Wired equivalent privacy

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections.
XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

A. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.

B. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP.

C. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.

D. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.

正解：A 解答を投票する

CWSP-208試験無料問題集「CWNP Certified Wireless Security Professional (CWSP) 認定」