Certified Wireless Security Professional v1.0

Page:    1 / 4   
Exam contains 60 questions

You are a WLAN engineer for a very large financial organization with locations around the globe. You have discovered that a new software version for your WLAN controllers is available from the manufacturer’s support website. It is your understanding that this new code will provide security enhancements for newer wireless technologies that have been recently introduced into your network.
Prior to deploying the new code across the entire company what event is critical?

  • A. Rebooting all controllers
  • B. Rebooting all APs
  • C. Upgrading all of the WIPS sensors
  • D. Approval from change management


Answer : D

Access control for stations used within an IEEE 802.11 WLAN can be achieved by implementing what technology?

  • A. Firewall technology
  • B. WMM technology
  • C. CCMP technology
  • D. TKIP technology


Answer : C

What weakness is introduced by allowing both WPA and WPA2 based clients to use the same SSID?

  • A. WPA uses TKIP for the cipher suite
  • B. WPA uses CCMP for the cipher suite
  • C. WPA uses only server-based certificates
  • D. WPA PSKs are harder to crack


Answer : A

Which one of the following describes a primary category of security policy?

  • A. Contractor access policy
  • B. Termination policy
  • C. OEM policy
  • D. Functional policy


Answer : D

What element should be addressed by a WLAN security policy?

  • A. Enabling encryption to prevent MAC addresses from being sent in clear text
  • B. End-user training for safe Wi-Fi use in the enterprise buildings and in public
  • C. Wireless network use
  • D. The exact passwords to be used for administration interfaces on infrastructure devices


Answer : B

What standard WLAN client device behavior can be exploited by an attacker during a hijacking attack?

  • A. After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.
  • B. When the RF signal between a client and an access point is disrupted, the client device will attempt to associate to an access point with better signal quality.
  • C. Client drivers scan for and connect to access points in the 2.4 GHz band before scanning the 5 GHz band.
  • D. As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.


Answer : B

When an attacker uses an AP with the same SSID or BSSID as your production network, what type of attack are they conducting?

  • A. Brute force
  • B. Evil Twin
  • C. Eavesdropping
  • D. ARP poisoning


Answer : B

How does Opportunistic Wireless Encryption (OWE) improve open or public network security?

  • A. It uses a cryptographic algorithm to encrypt user credentials when connecting to WPA3 supported hotspots.
  • B. It listens to see which encryption methods are being used on your network and predictively configures it on the clients.
  • C. It allows the client to negotiate which encryption method it will use when connecting, allowing multiple encryption types to be used in the same service set, including WPA, WPA2, and WPA3.
  • D. It uses a cryptographic handshake to encrypt traffic of devices connecting to open network access points.


Answer : D

What is a false statement regarding a robust security network association (RSNA)?

  • A. Disallows the use of WEP
  • B. Support for CCMP
  • C. Disallows the use of RC4
  • D. Allows for PSK implementation


Answer : C

What metric defines the aggregate expected loss from a risk occurrence in a year?

  • A. SLE
  • B. DDE
  • C. ALE
  • D. ARO


Answer : C

You use a web-based administration interface to administer the WLAN controllers on your network. What should always be disabled in this implementation to ensure secure management practices?

  • A. HTTP
  • B. HTTPS
  • C. SSH
  • D. TLS


Answer : A

A security auditor is preparing to perform a comprehensive assessment of an 802.11ac network. What task should be performed at the beginning of the audit to maximize the auditor’s ability to expose network vulnerabilities?

  • A. Identify the manufacturer of the wireless intrusion prevention system
  • B. Identify the skill level of the wireless network security administrator(s)
  • C. Identify all wireless security solutions in use
  • D. Identify the manufacturer of the wireless infrastructure hardware


Answer : C

If an attacker is capturing transmissions, altering the data, and retransmitting it, what type of attack are they performing?

  • A. Man-in-the-middle
  • B. Phishing
  • C. Social engineering
  • D. Denial of Service


Answer : A

In creating a wireless network for guest access, what is one strategy that can be used which will prevent any device that connects to the guest network from accessing any type of data on the corporate network?

  • A. SSID to VLAN mapping
  • B. Captive web portal
  • C. Preshared key authentication
  • D. Fast secure transition


Answer : A

What is an important feature on a guest network that increases security for the users and client devices?

  • A. A guest VLAN
  • B. A captive portal with redirection
  • C. A captive portal without redirection
  • D. Client isolation


Answer : D

Page:    1 / 4   
Exam contains 60 questions

Talk to us!


Have any questions or issues ? Please dont hesitate to contact us

Certlibrary.com is owned by MBS Tech Limited: Room 1905 Nam Wo Hong Building, 148 Wing Lok Street, Sheung Wan, Hong Kong. Company registration number: 2310926
Certlibrary doesn't offer Real Microsoft Exam Questions. Certlibrary Materials do not contain actual questions and answers from Cisco's Certification Exams.
CFA Institute does not endorse, promote or warrant the accuracy or quality of Certlibrary. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Terms & Conditions | Privacy Policy | Amazon Exams | Cisco Exams | CompTIA Exams | Databricks Exams | Fortinet Exams | Google Exams | Microsoft Exams | VMware Exams