support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. CWNP
  4. CWSP-207

Free CWSP-207 Exam Braindumps
Certified Wireless Security Professional Questions 46–50 (page: 11)

Updated On: 10-Feb-2026
Page 11 of 25
PDF with 119 Questions

Given: XYZ Company has recently installed an 802.11ac WLAN. The company needs the ability to control access to network services, such as file shares, intranet web servers, and Internet access based on an employee's job responsibilities.

What WLAN security solution meets this requirement?

  1. An autonomous AP system with MAC filters
  2. WPA2-Personal with support for LDAP queries
  3. A VPN server with multiple DHCP scopes
  4. A WLAN controller with RBAC features
  5. A WLAN router with wireless VLAN support

Answer(s): D



Given: Your network includes a controller-based WLAN architecture with centralized data forwarding. The AP builds an encrypted tunnel to the WLAN controller. The WLAN controller is uplinked to the network via a trunked 1 Gbps Ethernet port supporting all necessary VLANs for management, control, and client traffic.

What processes can be used to force an authenticated WLAN client's data traffic into a specific VLAN as it exits the WLAN controller interface onto the wired uplink? (Choose 3)

  1. On the Ethernet switch that connects to the AP, configure the switch port as an access port (not trunking) in the VLAN of supported clients.
  2. During 802.1X authentication, RADIUS sends a return list attribute to the WLAN controller assigning the user and all traffic to a specific VLAN.
  3. In the WLAN controller's local user database, create a static username-to-VLAN mapping on the WLAN controller to direct data traffic from a specific user to a designated VLAN.
  4. Configure the WLAN controller with static SSID-to-VLAN mappings; the user will be assigned to a VLAN according to the SSID being used.

Answer(s): B,C,D



What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

  1. The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.
  2. The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.
  3. The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.
  4. The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.

Answer(s): B



Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

  1. The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK. The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.
  2. If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user's passphrase. The PMK is then used during the 4-way handshake to create data encryption keys.
  3. After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK,
    is derived from the AAA key and is hashed with the PMK to create the PTK and GTK.
  4. The PMK is generated from a successful mutual EAP authentication.
    When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake.

Answer(s): A



What statement is true regarding the nonces (ANonce and SNonce) used in the IEEE 802.11 4 Way Handshake?

  1. Both nonces are used by the Supplicant and Authenticator in the derivation of a single PTK.
  2. The Supplicant uses the SNonce to derive its unique PTK and the Authenticator uses the ANonce to derive its unique PTK, but the nonces are not shared.
  3. Nonces are sent in EAPoL frames to indicate to the receiver that the sending station has installed and validated the encryption keys.
  4. The nonces are created by combining the MAC addresses of the Supplicant, Authenticator, and Authentication Server into a mixing algorithm.

Answer(s): A



  PDF
Viewing page 11 of 25
Viewing questions 51 - 55 out of 119 questions


Post your Comments and Discuss CWNP CWSP-207 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!