CWNP CWSP-207 Value Pack (Frequently Bought Together)

Given: XYZ Company has recently installed an 802.11ac WLAN. The company needs the ability to control access to network services, such as file shares, intranet web servers, and Internet access based on an employee's job responsibilities.
What WLAN security solution meets this requirement?

• A. A WLAN router with wireless VLAN support
• B. A VPN server with multiple DHCP scopes
• C. An autonomous AP system with MAC filters
• D. A WLAN controller with RBAC features
• E. WPA2-Personal with support for LDAP queries

Given: ABC Company has 20 employees and only needs one access point to cover their entire facility. Ten of ABC Company's employees have laptops with radio cards capable of only WPA security. The other ten employees have laptops with radio cards capable of WPA2 security. The network administrator wishes to secure all wireless communications (broadcast and unicast) for each laptop with its strongest supported security mechanism, but does not wish to implement a RADIUS/AAA server due to complexity.
What security implementation will allow the network administrator to achieve this goal?

• A. Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect.
• B. Implement two separate SSIDs on the AP-one for WPA-Personal using TKIP and one for WPA2-Personal using AES-CCMP.
• C. Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect.
• D. Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCMP.

In order to acquire credentials of a valid user on a public hot-spot network, what attacks may be conducted?
Choose the single completely correct answer.

• A. MAC denial of service and/or physical theft
• B. Social engineering and/or eavesdropping
• C. Code injection and/or XSS
• D. RF DoS and/or physical theft
• E. Authentication cracking and/or RF DoS

Given: During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text.
From a security perspective, why is this significant?

• A. The username can be looked up in a dictionary file that lists common username/password combinations.
• B. The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.
• C. The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
• D. 4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.

What security benefits are provided by endpoint security solution software? (Choose 3)

• A. Can restrict client connections to networks with specific SSIDs and encryption types
• B. Can collect statistics about a user's network use and monitor network threats while they are connected
• C. Can prevent connections to networks with security settings that do not conform to company policy
• D. Can be used to monitor for and prevent network attacks by nearby rogue clients or APs