Best CWSP-208 Exam Dumps for the Preparation of Latest CWSP-208 Exam Questions
Download Latest & Valid Questions For CWNP CWSP-208 exam
CWNP CWSP-208 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 15
In the basic 4-way handshake used in secure 802.11 networks, what is the purpose of the ANonce and SNonce? (Choose 2)
- A. The IEEE 802.11 standard requires that all encrypted frames contain a nonce to serve as a Message Integrity Check (MIC).
- B. They are added together and used as the GMK, from which the GTK is derived.
- C. They are input values used in the derivation of the Pairwise Transient Key.
- D. They are used to pad Message 1 and Message 2 so each frame contains the same number of bytes.
- E. They allow the participating STAs to create dynamic keys while avoiding sending unicast encryption keys across the wireless medium.
Answer: C,E
Explanation:
In the 802.11 4-Way Handshake:
D: The ANonce (from the AP) and SNonce (from the STA) are critical entropy values used along with the PMK, MAC addresses, etc., to derive the PTK securely.
E: This process ensures both parties derive the same PTK without ever transmitting the key over the air, mitigating interception risk.
Incorrect:
A). Nonces are not padding bytes.
B). Nonces are not the MIC; MIC is a separate integrity mechanism.
C). GMK and GTK are for group keys, not derived from nonces.
References:
CWSP-208 Study Guide, Chapter 3 (4-Way Handshake Mechanics)
IEEE 802.11i Specification
NEW QUESTION # 16
What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?
- A. EAP-TLS cannot establish a secure tunnel for internal EAP authentication.
- B. EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.
- C. EAP-TLS does not protect the client's username and password inside an encrypted tunnel.
- D. Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.
- E. EAP-TLS is supported only by Cisco wireless infrastructure and client devices.
Answer: B
Explanation:
EAP-TLS is considered one of the most secure EAP types, but:
It requires a Public Key Infrastructure (PKI).
Every client device must have a unique certificate, adding to administrative burden and cost.
Incorrect:
A). Roaming speed is not inherently slower with EAP-TLS if supported by the infrastructure.
B). EAP-TLS protects client credentials; passwords aren't even used-it uses certificates.
C). EAP-TLS does establish a secure tunnel-it's the original TLS-based method.
D). EAP-TLS is vendor-agnostic and supported by most enterprise WLAN infrastructure.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Comparison and TLS Overview)
CWNP EAP Method Deployment Guide
NEW QUESTION # 17
After completing the installation of a new overlay WIPS for the purpose of rogue detection and security monitoring at your corporate headquarters, what baseline function MUST be performed in order to identify security threats?
- A. Authorized PEAP usernames must be added to the WIPS server's user database.
- B. WLAN devices that are discovered must be classified (rogue, authorized, neighbor, etc.) and a WLAN policy must define how to classify new devices.
- C. Separate security profiles must be defined for network operation in different regulatory domains
- D. Upstream and downstream throughput thresholds must be specified to ensure that service-level agreements are being met.
Answer: B
Explanation:
After deploying a WIPS, an essential baseline activity is to classify all detected devices in the RF environment. These classifications allow the system to enforce security policies and detect policy violations.
Classifications include:
Authorized (managed devices)
Rogue (unauthorized, possibly dangerous)
Neighbor (not part of your network but legitimate)
External or Ad hoc devices
Without this initial classification, WIPS cannot properly assess threats or trigger alarms.
References:
CWSP-208 Study Guide, Chapter 7 - WIPS Classification and Threat Management CWNP CWSP-208 Objectives: "Device Classification and Policy Enforcement"
NEW QUESTION # 18
Given: ABC Hospital wishes to create a strong security policy as a first step in securing their 802.11 WLAN.
Before creating the WLAN security policy, what should you ensure you possess?
- A. Security policy generation software
- B. Management support for the process
- C. Awareness of the exact vendor devices being installed
- D. End-user training manuals for the policies to be created
Answer: B
Explanation:
Developing a robust WLAN security policy requires buy-in from executive or senior management. Without management support, it's difficult to enforce compliance, allocate resources, or prioritize security among other organizational objectives. This foundational step ensures that policy creation and enforcement are feasible and aligned with organizational goals.
Incorrect:
A). Device/vendor specifics are addressed later during implementation.
C). End-user training materials are created after the policy is finalized.
D). Security policy software can assist, but is not essential compared to management support.
References:
CWSP-208 Study Guide, Chapter 2 (Policy Development and Implementation) CWNP WLAN Lifecycle Framework
NEW QUESTION # 19
You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4- way handshake.
Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)
- A. STA1 is a reassociation and STA2 is an initial association.
- B. STA1 is a TSN, and STA2 is an RSN.
- C. STA1 and STA2 are using different cipher suites.
- D. STA2 has retransmissions of EAP frames.
- E. STA1 and STA2 are using different EAP types.
Answer: E
Explanation:
Different EAP types involve varying numbers of exchanges:
EAP-TLS, for example, involves more exchanges due to certificate negotiation.
EAP-MD5 or PEAP might involve fewer steps.
Thus, the most likely reason for different frame counts during successful authentication is the use of different EAP types.
Incorrect:
A). Cipher suites are negotiated after EAP, not during it.
B). Retransmissions would typically cause noticeable delay and not result in exactly 11 frames.
C). Reassociation does not significantly reduce EAP frame count.
D). RSN/TSN differences are not directly related to EAP exchange length.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Protocol Operation)
IEEE 802.1X and EAP Behavior Documentation
NEW QUESTION # 20
You are configuring seven APs to prevent common security attacks. The APs are to be installed in a small business and to reduce costs, the company decided to install all consumer-grade wireless routers. The wireless routers will connect to a switch, which connects directly to the Internet connection providing 50 Mbps of Internet bandwidth that will be shared among 53 wireless clients and 17 wired clients.
To ensure the wireless network is as secure as possible from common attacks, what security measure can you implement given only the hardware referenced?
- A. 802.1X/EAP-PEAP
- B. WPA2-Enterprise
- C. WPA2-Personal
- D. WPA-Enterprise
Answer: C
Explanation:
Given that only consumer-grade routers are used and no RADIUS server or enterprise infrastructure is mentioned, WPA2-Personal is the most secure option available. It uses a pre-shared key (PSK) for authentication and AES-CCMP for encryption, offering strong protection for small businesses lacking enterprise equipment.
Enterprise methods such as WPA2-Enterprise, 802.1X, and EAP-PEAP require a RADIUS server or authentication backend, which isn't supported in typical consumer-grade routers.
References:
CWSP-208 Study Guide, Chapter 3 (WLAN Security Technologies)
CWNP Wi-Fi Security Deployment Guide for Small Businesses
CWNP E-Learning Modules: WPA2-PSK vs WPA2-Enterprise
NEW QUESTION # 21
What protocols allow a network administrator to securely manage the configuration of WLAN controllers and access points? (Choose 2)
- A. TFTP
- B. SNMPv1
- C. SSHv2
- D. FTP
- E. Telnet
- F. HTTPS
Answer: C,F
Explanation:
Secure configuration of network devices requires encrypted management protocols:
HTTPS: Provides secure web-based GUI access using TLS encryption.
SSHv2: Provides secure CLI access using encrypted channels.
Incorrect:
A). SNMPv1 is not secure - lacks encryption and authentication.
C). Telnet sends credentials and commands in clear text.
D). TFTP is used for file transfer without encryption or authentication.
E). FTP is also insecure-transmits credentials in plain text.
References:
CWSP-208 Study Guide, Chapter 7 (Management Plane Security)
CWNP Secure Management Practices
NEW QUESTION # 22
Wireless Intrusion Prevention Systems (WIPS) provide what network security services? (Choose 2)
- A. Configuration distribution for autonomous APs
- B. Policy enforcement and compliance management
- C. Analysis and reporting of AP CPU utilization
- D. Wireless vulnerability assessment
- E. Application-layer traffic inspection
Answer: B,D
Explanation:
WIPS systems provide proactive security by continuously scanning for threats and ensuring WLAN policy compliance. Their capabilities include:
B). Wireless vulnerability assessment: Scanning for misconfigured APs, weak encryption, and unauthorized devices.
E). Policy enforcement and compliance: Ensuring security settings adhere to enterprise or regulatory requirements and alerting on deviations.
Other options like application-layer inspection and AP CPU monitoring are outside the WIPS function scope.
References:
CWSP-208 Study Guide, Chapter 7 - WIPS Services and Capabilities
CWNP CWSP-208 Objectives: "WIPS Threat Mitigation and Enforcement"
NEW QUESTION # 23
Wireless Intrusion Prevention Systems (WIPS) are used for what purposes? (Choose 3)
- A. Classifying wired client devices
- B. Detecting and defending against eavesdropping attacks
- C. Performance monitoring and troubleshooting
- D. Enforcing wireless network security policy
- E. Security monitoring and notification
- F. Preventing physical carrier sense attacks
Answer: C,D,E
Explanation:
WIPS provides multiple functionalities:
B). Policy enforcement - detects and responds to wireless threats such as rogue APs and misconfigurations.
D). Security monitoring - alerts staff when threats like deauth attacks or malware-hosting APs are detected.
A). Performance monitoring - supports diagnostics by capturing information on channel conditions, interference, and device behavior.
Incorrect options:
C). Detecting eavesdropping isn't feasible-passive listening cannot be identified by sensors.
E). Carrier sense DoS and F. Wired device classification are outside WIPS's scope.
References:
CWSP#207 Study Guide, Chapters 5-6 (WIPS Capabilities)
NEW QUESTION # 24
Given: ABC Company has 20 employees and only needs one access point to cover their entire facility. Ten of ABC Company's employees have laptops with radio cards capable of only WPA security. The other ten employees have laptops with radio cards capable of WPA2 security. The network administrator wishes to secure all wireless communications (broadcast and unicast) for each laptop with its strongest supported security mechanism, but does not wish to implement a RADIUS/AAA server due to complexity.
What security implementation will allow the network administrator to achieve this goal?
- A. Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCMP.
- B. Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect.
- C. Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect.
- D. Implement two separate SSIDs on the AP-one for WPA-Personal using TKIP and one for WPA2- Personal using AES-CCMP.
Answer: D
NEW QUESTION # 25
ABC Company has deployed a Single Channel Architecture (SCA) solution to help overcome some of the common problems with client roaming. In such a network, all APs are configured with the same channel and BSSID. PEAPv0/EAP-MSCHAPv2 is the only supported authentication mechanism.
As the Voice over Wi-Fi (STA-1) client moves throughout this network, what events are occurring?
- A. The WLAN controller is querying the RADIUS server for authentication before the association of STA-
1 is moved from one AP to the next. - B. STA-1 controls when and where to roam by using signal and performance metrics in accordance with the chipset drivers and 802.11k.
- C. STA-1 initiates open authentication and 802.11 association with each AP prior to roaming.
- D. The WLAN controller controls the AP to which STA-1 is associated and transparently moves this association in accordance with the physical location of STA-1.
Answer: A
Explanation:
An 802.11a/g-based WIPS cannot detect rogue activity that occurs in 802.11n/ac-specific modes, including Greenfield (HT-only) operation and use of 40 MHz channels, which are not part of the 802.11a/g specification. Greenfield mode disables legacy support, so a WIPS limited to 802.11a/g radios won't even
"see" these frames. This leaves a significant blind spot for detecting certain types of rogue devices or attacks using newer PHYs.
References:
CWSP-208 Study Guide, Chapter 7 - WIPS Capabilities and Limitations
CWNP CWSP-208 Objectives: "Protocol Compatibility and Threat Detection"
NEW QUESTION # 26
ABC Company uses the wireless network for highly sensitive network traffic. For that reason, they intend to protect their network in all possible ways. They are continually researching new network threats and new preventative measures. They are interested in the security benefits of 802.11w, but would like to know its limitations.
What types of wireless attacks are protected by 802.11w? (Choose 2)
- A. Robust management frame replay attacks
- B. Layer 2 Disassociation attacks
- C. Social engineering attacks
- D. RF DoS attacks
Answer: A,B
Explanation:
802.11w, also known as Protected Management Frames (PMF), is designed to protect specific types of 802.11 management frames such as disassociation and deauthentication frames. These frames were previously sent unencrypted and could be spoofed by attackers to disconnect clients (DoS attacks). With 802.11w, these frames are cryptographically protected, mitigating such attacks.
PMF also includes replay protection for these management frames, preventing attackers from capturing and replaying them to disrupt network connectivity.
References:
CWSP-208 Study Guide, Chapter 6 (Wireless LAN Security Solutions)
IEEE 802.11w-2009 amendment
CWNP Whitepapers on PMF and Management Frame Protection
NEW QUESTION # 27
What statement is true regarding the nonces (ANonce and SNonce) used in the IEEE 802.11 4 Way Handshake?
- A. Both nonces are used by the Supplicant and Authenticator in the derivation of a single PTK.
- B. The Supplicant uses the SNonce to derive its unique PTK and the Authenticator uses the ANonce to derive its unique PTK, but the nonces are not shared.
- C. The nonces are created by combining the MAC addresses of the Supplicant, Authenticator, and Authentication Server into a mixing algorithm.
- D. Nonces are sent in EAPoL frames to indicate to the receiver that the sending station has installed and validated the encryption keys.
Answer: A
Explanation:
The PTK derivation requires:
PMK
ANonce (generated by the Authenticator)
SNonce (generated by the Supplicant)
MAC addresses of both Authenticator and Supplicant
Both the Supplicant and Authenticator derive the same PTK using identical inputs during the 4-Way Handshake.
Incorrect:
B). The nonces are shared-each party uses both ANonce and SNonce.
C). Nonces indicate no such validation message.
D). The MACs are part of the PTK input but not used to generate the nonces themselves.
References:
CWSP-208 Study Guide, Chapter 3 (4-Way Handshake)
IEEE 802.11i Key Management Process
NEW QUESTION # 28
Which one of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?
- A. It is not a valid EAP type.
- B. It does not support mutual authentication.
- C. It does not support the outer identity.
- D. It does not support a RADIUS server.
Answer: B
Explanation:
EAP-MD5:
Only authenticates the client.
Does not provide mutual authentication, making it vulnerable to man-in-the-middle attacks.
It also does not protect the user's identity or credentials in a secure tunnel.
Incorrect:
A). The outer identity concept is not relevant to EAP-MD5 since it doesn't support tunneling.
B). EAP-MD5 is a valid EAP type, just insecure.
D). It can be used with a RADIUS server, but security is insufficient.
References:
CWSP-208 Study Guide, Chapter 4 (EAP Method Comparison)
CWNP EAP Implementation Considerations
NEW QUESTION # 29
Given: Many computer users connect to the Internet at airports, which often have 802.11n access points with a captive portal for authentication.
While using an airport hot-spot with this security solution, to what type of wireless attack is a user susceptible? (Choose 2)
- A. IGMP snooping
- B. UDP port redirection
- C. Man-in-the-Middle
- D. Wi-Fi phishing
- E. Management interface exploits
Answer: C,D
Explanation:
Open networks with captive portals do not provide link-layer encryption, so:
A). Man-in-the-Middle (MitM): Attackers can intercept or modify traffic between the user and the legitimate network (especially before HTTPS negotiation).
B). Wi-Fi phishing: Evil twin APs may mimic the legitimate hotspot and show a fake captive portal, stealing user credentials or prompting malicious downloads.
Incorrect:
C). Management interface exploits target device admin panels, not typical client users.
D). UDP port redirection and
E). IGMP snooping are network-layer behaviors, not common user-targeted attacks.
References:
CWSP-208 Study Guide, Chapter 5 (Hotspot Vulnerabilities)
CWNP Wi-Fi Phishing and Evil Twin Defense Strategies
NEW QUESTION # 30
What 802.11 WLAN security problem is directly addressed by mutual authentication?
- A. Weak password policies
- B. Disassociation attacks
- C. MAC spoofing
- D. Weak Initialization Vectors
- E. Offline dictionary attacks
- F. Wireless hijacking attacks
Answer: F
Explanation:
Mutual authentication involves both the client and the authentication server verifying each other's identity before network access is granted. This prevents attackers from spoofing an access point (AP) and luring clients to connect to rogue APs (often used in wireless hijacking or evil twin attacks). When mutual authentication (typically via 802.1X with EAP-TLS) is used, clients will not connect unless they can verify the server certificate, which thwarts hijacking attempts.
References:
CWSP-208 Study Guide, Chapter 4 (Authentication and Access Control)
CWNP E-Learning: 802.1X and EAP Authentication Framework
IEEE 802.1X and WPA2-Enterprise concepts
NEW QUESTION # 31
In order to acquire credentials of a valid user on a public hot-spot network, what attacks may be conducted?
Choose the single completely correct answer.
- A. RF DoS and/or physical theft
- B. MAC denial of service and/or physical theft
- C. Authentication cracking and/or RF DoS
- D. Social engineering and/or eavesdropping
- E. Code injection and/or XSS
Answer: D
Explanation:
Comprehensive Detailed Explanation:
On public Wi-Fi hotspots (typically unsecured), attackers often perform:
Eavesdropping: By passively listening to unencrypted traffic, an attacker can capture credentials or sensitive data.
Social engineering: Users may be tricked into entering their credentials on a spoofed login page or disclosing them directly through phishing or manipulation.
These are the most effective and common methods for credential theft in open network environments.
Incorrect:
B & C. Physical theft is not network-based and not relevant to hotspot-based credential acquisition.
D). Authentication cracking is not applicable to open networks with captive portals.
E). Code injection/XSS may happen in web apps but are not directly methods for acquiring hotspot credentials.
References:
CWSP-208 Study Guide, Chapter 5 (Threats and Attacks)
CWNP Security Essentials: Eavesdropping and Social Engineering in WLANs
NEW QUESTION # 32
Given: Mary has just finished troubleshooting an 802.11g network performance problem using a laptop-based WLAN protocol analyzer. The wireless network implements 802.1X/PEAP and the client devices are authenticating properly. When Mary disables the WLAN protocol analyzer, configures her laptop for PEAP authentication, and then tries to connect to the wireless network, she is unsuccessful. Before using the WLAN protocol analyzer, Mary's laptop connected to the network without any problems.
What statement indicates why Mary cannot access the network from her laptop computer?
- A. Mary's supplicant software is using PEAPv0/EAP-MSCHAPv2, and the access point is using PEAPv1
/EAP-GTC. - B. The protocol analyzer's network interface card (NIC) drivers are still loaded and do not support the version of PEAP being used.
- C. The PEAP client's certificate was voided when the protocol analysis software assumed control of the wireless adapter.
- D. The nearby WIPS sensor categorized Mary's protocol analyzer adapter as a threat and is performing a deauthentication flood against her computer.
Answer: B
Explanation:
Many protocol analyzers require special drivers or place the NIC into monitor/promiscuous mode. When used this way, the original driver stack may be altered or replaced. Afterward, if not correctly reloaded, the adapter may lack full 802.1X support or required encryption features. This is likely the case here - Mary's WLAN adapter is still under the control of or affected by the analyzer's NIC driver, which doesn't support PEAP properly.
References:
CWSP-208 Study Guide, Chapter 6 - Protocol Analysis Limitations and NIC Driver Issues CWNP CWSP-208 Objectives: "Troubleshooting WLAN Authentication and Driver Conflicts"
NEW QUESTION # 33
......
Exam Materials for You to Prepare & Pass CWSP-208 Exam: https://braindumps2go.dumpstorrent.com/CWSP-208-exam-prep.html