CWSP-205

CWSP-205 practice questions, page 5 of 5, with answer review and explanations.

Question 21

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporations wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized users connections. XYZs legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

  1. All WLAN clients will reassociate to the consultants software AP if the consultants software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.
  2. A higher SSID priority value configured in the Beacon frames of the consultants software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.
  3. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultants software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.
  4. If the consultant’s software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ’s current 802.11b data rates, all

Question 22

What elements should be addressed by a WLAN security policy? (Choose 2)

  1. Enabling encryption to prevent MAC addresses from being sent in clear text
  2. How to prevent non-IT employees from learning about and reading the user security policy
  3. End-user training for password selection and acceptable network use
  4. The exact passwords to be used for administration interfaces on infrastructure devices
  5. Social engineering recognition and mitigation techniques

Question 23

As a part of a large organization’s security policy, how should a wireless security professional address the problem of rogue access points?

  1. Use a WPA2-Enterprise compliant security solution with strong mutual authentication and encryption for network access of corporate devices.
  2. Hide the SSID of all legitimate APs on the network so that intruders cannot copy this parameter on rogue APs.
  3. Conduct thorough manual facility scans with spectrum analyzers to detect rogue AP RF signatures.
  4. A trained employee should install and configure a WIPS for rogue detection and response measures.
  5. Enable port security on Ethernet switch ports with a maximum of only 3 MAC addresses on each port.