Free CWSP-206: CWSP Certified Wireless Security Professional Exam Questions and Answers

A security audit of a company's autonomous APs finds that administrators manage them over Telnet and HTTP, and that the management system polls them with SNMPv2c. Which two changes would best reduce the exposure of management traffic and credentials? (Choose two.)

Select 2 answers.

• AA. Migrate SNMP to SNMPv3 with authentication and encryption enabled
• BB. Change the SNMPv2c community strings to longer random values
• CC. Replace Telnet and HTTP management with SSH and HTTPS
• DD. Restrict Telnet access to the wired management VLAN

A company's WLAN controller and APs have a combined asset value of $80,000. A risk analysis estimates that a successful attack on them would destroy 25% of that value. What is the single loss expectancy (SLE)?

• AA. $3,200
• BB. $20,000
• CC. $60,000
• DD. $80,000

Which IEEE 802.11 amendment defines the network discovery and selection mechanism (ANQP) that Hotspot 2.0 uses to let a client choose a network before associating?

• AA. 802.11i
• BB. 802.11r
• CC. 802.11u
• DD. 802.11w

In a qualitative risk analysis of a WLAN, which two factors are combined to assign a risk rating to a threat?

• AA. Vendor patch availability and current firmware age
• BB. Number of exposed APs and their transmit power
• CC. Likelihood of occurrence and impact on the organization
• DD. Asset purchase cost and annual depreciation rate

Controller reports show an average of 34 associated clients per AP in a conference center. The average has risen by 4 clients per AP each quarter for the past year. The design limit is 50 clients per AP. If the trend continues, in how many quarters will the average reach the design limit?

• AA. 2 quarters
• BB. 3 quarters
• CC. 4 quarters
• DD. 5 quarters

In a quantitative WLAN risk analysis, which calculation produces the single loss expectancy (SLE) for an asset?

• AA. Asset value × exposure factor
• BB. Annualized loss expectancy × exposure factor
• CC. Asset value ÷ annualized rate of occurrence
• DD. Annualized rate of occurrence × exposure factor

A WIPS logs spoofed deauthentication frames sent from the BSSID of an AP to a client on a WPA2-Personal SSID. The client reassociates immediately and completes a full 4-way handshake. The unknown transmitter then stops and sends no further frames. What is the attacker most likely attempting?

• AA. A denial-of-service attack that exhausts the association table of the AP
• BB. An offline dictionary attack against the passphrase using the captured 4-way handshake
• CC. A downgrade attack that forces the client to fall back to WEP encryption
• DD. An RF jamming attack that disrupts the client at the physical layer

A hospital purchases a cyber insurance policy that covers financial losses resulting from a breach of its wireless network. Which risk response does this represent?

• AA. Risk mitigation
• BB. Risk avoidance
• CC. Risk transfer
• DD. Risk acceptance

A coffee shop chain offers guest Wi-Fi on an open SSID. Guests must not be asked to enter a passphrase, but the owner wants over-the-air data frames protected from other patrons using protocol analyzers. Which of these should be configured on the guest SSID?

• AA. Register guest MAC addresses at the front desk and filter on them
• BB. Require guests to authenticate through an HTTPS captive portal
• CC. Enable OWE on the guest SSID
• DD. Disable SSID broadcast and rotate the SSID name weekly

Which of these must be obtained before a configuration change is made to production WLAN controllers?

• AA. A completed penetration test report covering the new configuration
• BB. A WIPS baseline report generated after the change is applied
• CC. A revised WLAN security policy signed by the executive sponsor
• DD. Documented approval of the change request from the designated change authority