QUESTION: 41 Exam Topic: 3, WLAN Security Design and Architecture

Given: ABC Company has 20 employees and only needs one access point to cover their entire facility. Ten of ABC Company's employees have laptops with radio cards capable of only WPA security. The other ten employees have laptops with radio cards capable of WPA2 security. The network administrator wishes to secure all wireless communications (broadcast and unicast) for each laptop with its strongest supported security mechanism, but does not wish to implement a RADIUS/AAA server due to complexity.

What security implementation will allow the network administrator to achieve this goal?

Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect.
Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect.
Implement two separate SSIDs on the AP--one for WPA-Personal using TKIP and one for WPA2- Personal using AES-CCMP.
Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCMP.

Answer(s): C

Reveal Solution Next Question

QUESTION: 42 Exam Topic: 3, WLAN Security Design and Architecture

What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?

Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.
EAP-TLS does not protect the client's username and password inside an encrypted tunnel.
EAP-TLS cannot establish a secure tunnel for internal EAP authentication.
EAP-TLS is supported only by Cisco wireless infrastructure and client devices.
EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.

Answer(s): E

Reveal Solution Next Question

QUESTION: 43 Exam Topic: 3, WLAN Security Design and Architecture

Given: You are using WEP as an encryption solution. You are using VLANs for network segregation.

Why can you not establish an RSNA?

RSNA connections require TKIP or CCMP.
RSNA connections require BIP and do not support TKIP, CCMP or WEP.
RSNA connections require CCMP and do not support TKIP or WEP.
RSNA connections do not work in conjunction with VLANs.

Answer(s): A

Reveal Solution Next Question

QUESTION: 44 Exam Topic: 3, WLAN Security Design and Architecture

When used as part of a WLAN authentication solution, what is the role of LDAP?

A data retrieval protocol used by an authentication service such as RADIUS
An IEEE X.500 standard compliant database that participates in the 802.1X port-based access control process
A SQL compliant authentication service capable of dynamic key generation and distribution
A role-based access control protocol for filtering data to/from authenticated stations.
An Authentication Server (AS) that communicates directly with, and provides authentication for, the Supplicant.

Answer(s): A

Reveal Solution Next Question

Free CWSP-207 Exam Braindumps (page: 11)

QUESTION: 41 Exam Topic: 3, WLAN Security Design and Architecture

QUESTION: 42 Exam Topic: 3, WLAN Security Design and Architecture

QUESTION: 43 Exam Topic: 3, WLAN Security Design and Architecture

QUESTION: 44 Exam Topic: 3, WLAN Security Design and Architecture