CWSP-208 무료 덤프문제 온라인 액세스

The following numbered items show some of the contents of each of the four frames exchanged during the 4-way handshake:
1. Encrypted GTK sent
2. Confirmation of temporal key installation
3. Anonce sent from authenticator to supplicant
4. Snonce sent from supplicant to authenticator, MIC included
Arrange the frames in the correct sequence beginning with the start of the 4-way handshake.

• A.4, 3, 1, 2
• B.1, 2, 3, 4
• C.3, 4, 1, 2
• D.2, 3, 4, 1

Which one of the following is a valid reason to avoid the use of EAP-MD5 in production WLANs?

• A.It does not support a RADIUS server.
• B.It is not a valid EAP type.
• C.It does not support the outer identity.
• D.It does not support mutual authentication.

ABC Hospital desires to create a strong security police as a first step in securing their 802.11 WLAN. How are policies related to risk?

• A.Risk should be factored into the policies selected and enforced
• B.Policies are the only determiner of risks to which you will be exposed
• C.Security policies are required of all organization in most countries
• D.Organizations with policies are at higher risk of attack

Given: During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?

• A.The username can be looked up in a dictionary file that lists common username/password combinations.
• B.4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.
• C.The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
• D.The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

What EAP type supports using MS-CHAPv2, EAP-GTC or EAP-TLS for wireless client authentication?

• A.H-REAP
• B.LEAP
• C.EAP-GTC
• D.PEAP
• E.EAP-TTLS