Free CWNP CWSP-206 Exam Dumps Questions & Answers

Which of the following are social engineering techniques? Each correct answer represents a complete solution. Choose all that apply.

• A.  Salami attack
• B.  Phishing
• C.  Pretexting
• D.  Baiting

The Marketing department's WLAN users need to reach their file and email server as well as the Internet, but should not have access to any other network resources. What single WLAN security feature should be implemented to comply with these requirements?

• A.  Mutual authentication
• B.  Role-based access control
• C.  RADIUS policy accounting
• D.  Group authentication
• E.  Captive portal

Which one of the following is not a role defined in the 802.1X authentication procedures used in
802.11 and 802.3 networks for port-based authentication?

• A.  Supplicant
• B.  Authentication Server
• C.  AAA Server
• D.  Authenticator

Which of the following are the layers of physical security? Each correct answer represents a complete solution. Choose all that apply.

• A.  Procedural access control
• B.  Environmental design
• C.  Video monitor
• D.  Intrusion detection system

ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations. As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication?

• A.  MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
• B.  MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
• C.  When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure.
• D.  MS-CHAPv2 uses AES authentication, and is therefore secure.
• E.  LEAP's use of MS-CHAPv2 is only secure when combined with WEP.