Question 1

What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

Options :

A : Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.

B : Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

C : Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.

D : The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.

Answer: B

Question 2

You are using a protocol analyzer for random checks of activity on the WLAN. In the process, you notice two different EAP authentication processes. One process (STA1) used seven EAP frames (excluding ACK frames) before the 4-way handshake and the other (STA2) used 11 EAP frames (excluding ACK frames) before the 4-way handshake. Which statement explains why the frame exchange from one STA required more frames than the frame exchange from another STA when both authentications were successful? (Choose the single most probable answer given a stable WLAN.)

Options :

A : STA1 and STA2 are using different cipher suites.

B : STA2 has retransmissions of EAP frames.

C : STA1 is a reassociation and STA2 is an initial association.

D : STA1 is a TSN, and STA2 is an RSN.

E : STA1 and STA2 are using different EAP types.

Answer: E

Question 3

What drawbacks initially prevented the widespread acceptance and use of Opportunistic Key Caching (OKC)?

Options :

A :

Sharing cached keys between controllers during inter-controller roaming created vulnerabilities that exposed the keys to attackers.

B :

Because OKC is not defined by any standards or certification body, client support was delayed and sporadic early on.

C :

Key exchanges during fast roams required processor-intensive cryptography, which was prohibitive for legacy devices supporting only TKIP.

D :

The Wi-Fi Alliance continually delayed the creation of a client certification for OKC, even though it was defined by IEEE 802.11r.

Answer: B

Question 4

What preventative measures are performed by a WIPS against intrusions?

Options :

A : EAPoL Reject frame flood against a rogue AP

B : Evil twin attack against a rogue AP

C : Deauthentication attack against a classified neighbor AP

D : ASLEAP attack against a rogue AP

E : Uses SNMP to disable the switch port to which rogue APs connect

Answer: E

Question 5

As a part of a large organization’s security policy, how should a wireless security professional address the problem of rogue access points?

Options :

A :

Use a WPA2-Enterprise compliant security solution with strong mutual authentication and encryption for network access of corporate devices.

B :

Hide the SSID of all legitimate APs on the network so that intruders cannot copy this parameter on rogue APs.

C : Conduct thorough manual facility scans with spectrum analyzers to detect rogue AP RF signatures.

D : A trained employee should install and configure a WIPS for rogue detection and response measures.

E : Enable port security on Ethernet switch ports with a maximum of only 3 MAC addresses on each port.

Answer: D

Free CWSP-208 Mock Exam – Practice Online Confidently

Buying Options: