Online Access Free CWSP-205 Exam Questions

When using a tunneled EAP type, such as PEAP, what component is protected inside the TLS tunnel so that it is not sent in clear text across the wireless medium?

• A.Server credentials
• B.X.509 certificates
• C.RADIUS shared secret
• D.User credentials

What is one advantage of using EAP-TTLS instead of EAP-TLS as an authentication mechanism in an 802.11 WLAN?

• A.EAP-TTLS does not require the use of a certificate for each STA as authentication credentials, but EAP-TLS does.
• B.EAP-TTLS does not require an authentication server, but EAP-TLS does.
• C.EAP-TTLS sends encrypted supplicant credentials to the authentication server, but EAP-TLS uses unencrypted user credentials.
• D.EAP-TTLS supports client certificates, but EAP-TLS does not.

ABC Company requires the ability to identify and quickly locate rogue devices. ABC has chosen an overlay WIPS solution with sensors that use dipole antennas to perform this task. Use your knowledge of location tracking techniques to answer the question.
In what ways can this 802.11-based WIPS platform determine the location of rogue laptops or APs? (Choose 3)

• A.Trilateration of RSSI measurements
• B.Angle of Arrival (AoA)
• C.Time Difference of Arrival (TDoA)
• D.RF Fingerprinting
• E.GPS Positioning

You must locate non-compliant 802.11 devices. Which one of the following tools will you use and why?

• A.A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance
• B.A spectrum analyzer, because it can show the energy footprint of a device using WPA differently from a device using WPA2.
• C.A protocol analyzer, because it can be used to view the spectrum energy of noncompliant 802.11 devices, which is always different from compliant devices.
• D.A spectrum analyzer, because it can decode the PHY preamble of a non-compliant device.

Given: Your network includes a controller-based WLAN architecture with centralized data forwarding. The AP builds an encrypted tunnel to the WLAN controller. The WLAN controller is uplinked to the network via a trunked 1 Gbps Ethernet port supporting all necessary VLANs for management, control, and client traffic.
What processes can be used to force an authenticated WLAN client's data traffic into a specific VLAN as it exits the WLAN controller interface onto the wired uplink? (Choose 3)

• A.Configure the WLAN controller with static SSID-to-VLAN mappings; the user will be assigned to a VLAN according to the SSID being used.
• B.On the Ethernet switch that connects to the AP, configure the switch port as an access port (not trunking) in the VLAN of supported clients.
• C.In the WLAN controller's local user database, create a static username-to-VLAN mapping on the WLAN controller to direct data traffic from a specific user to a designated VLAN.
• D.During 802.1X authentication, RADIUS sends a return list attribute to the WLAN controller assigning the user and all traffic to a specific VLAN.