CWSP-205

CWSP-205 practice questions, page 2 of 5, with answer review and explanations.

Question 6

Given: One of the security risks introduced by WPA2-Personal is an attack conducted by an authorized network user who knows the passphrase. In order to decrypt other users traffic, the attacker must obtain certain information from the 4-way handshake of the other users. In addition to knowing the Pairwise Master Key (PMK) and the supplicants address (SA), what other three inputs must be collected with a protocol analyzer to recreate encryption keys? (Choose 3)

  1. Authenticator nonce
  2. Supplicant nonce
  3. Authenticator address (BSSID)
  4. GTKSA
  5. Authentication Server nonce

Question 7

What is a primary criteria for a network to qualify as a Robust Security Network (RSN)?

  1. Token cards must be used for authentication.
  2. Dynamic WEP-104 encryption must be enabled.
  3. WEP may not be used for encryption.
  4. WPA-Personal must be supported for authentication and encryption.
  5. WLAN controllers and APs must not support SSHv1.

Question 8

Given: You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11. What kind of troubleshooting are you likely performing with such a tool?

  1. Wireless adapter failure analysis.
  2. Interference source location.
  3. Fast secure roaming problems.
  4. Narrowband DoS attack detection.

Question 9

Which of the following security attacks cannot be detected by a WIPS solution of any kind? (Choose 2)

  1. Rogue APs
  2. DoS
  3. Eavesdropping
  4. Social engineering

Question 10

Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data. What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

  1. All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.
  2. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.
  3. Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.
  4. Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.
  5. The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.