CWNP CWSP-207 Free Sample Exam Questions 2026

Here you can get the actual CWNP CWSP-207 exam questions and answers in PDF for free and for all questions premium file. These best Certified Wireless Security Professional Exam CWSP-207 PDF questions are for every CWNP users. Real CWSP-207 exam dumps that will assist you to crack the %certification% certification exam in the PDF format. For Advance preparation premium PDF files available for perfect exam preparation on reilable price option.

UNLOCK FULL
CWSP-207 Exam Features

In Just $35 You can Access

• All Official Question Types
• Interactive Web-Based Practice Test Software
• No Installation or 3rd Party Software Required
• Customize your practice sessions (Free Demo)
• 24/7 Customer Support

Get Full Access

Page: 1 / 24
Total Questions: 119

Questions & Answers PDF

• Question 1

  

  A single AP is configured with three separate WLAN profiles, as follows:

  • SSID: ABCData – BSSID: 00:11:22:00:1F:C3 – VLAN 10 – Security: PEAPv0/EAP-MSCHAPv2 withAES-CCMP – 3 current clients
  • SSID: ABCVoice – BSSID: 00:11:22:00:1F:C4 – VLAN 60 – Security: WPA2-Personal with AES-CCMP –2 current clients
  • SSID: Guest – BSSID: 00:11:22:00:1F:C5 – VLAN 90 – Security: Open with captive portal authentication – 3 current clientsThree STAs are connected to ABCData. Three STAs are connected to Guest. Two STAs are connected to ABCVoice.How many unique GTKs and PTKs are currently in place in this scenario?
  • 1 GTK – 8 PTKs
  • 2 GTKs – 5 PTKs
  • 2 GTKs – 8 PTKs
  • 3 GTKs – 8 PTKs

  Reveal Answer Answer: B Next Question

• Question 2

  

  Given: ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless data. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hot-spot include: Cannot access corporate network resourcesNetwork permissions are limited to Internet access All stations must be authenticatedWhat security controls would you suggest? (Choose the single best answer.)

  • Implement separate controllers for the corporate and guest WLANs.
  • Use a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.
  • Configure access control lists (ACLs) on the guest WLAN to control data types and destinations.
  • Require guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.
  • Force all guest users to use a common VPN protocol to connect.

  Reveal Answer Answer: D Next Question

• Question 3

  

  The IEEE 802.11 standard defined Open System authentication as consisting of two auth frames and two assoc frames. In a WPA2-Enterprise network, what process immediately follows the 802.11 association procedure?

  • Group Key Handshake
  • 802.1X/EAP authentication
  • DHCP Discovery
  • 4-Way Handshake
  • Passphrase-to-PSK mapping
  • RADIUS shared secret lookup

  Reveal Answer Answer: B Next Question

• Question 4

  

  What is the purpose of the Pairwise Transient Key (PTK) in IEEE 802.11 Authentication and Key Management?

  • The PTK is a type of master key used as an input to the GMK, which is used for encrypting multicast data frames.
  • The PTK contains keys that are used to encrypt unicast data frames that traverse the wireless medium.
  • The PTK is XOR'd with the PSK on the Authentication Server to create the AAA key.
  • The PTK is used to encrypt the Pairwise Master Key (PMK) for distribution to the 802.1X Authenticator prior to the 4-Way Handshake.

  Reveal Answer Answer: B Next Question

• Question 5

  

  Given: You manage a wireless network that services 200 wireless users. Your facility requires 20 access points, and you have installed an IEEE 802.11-compliant implementation of 802.1X/LEAP with AES-CCMP as an authentication and encryption solution.In this configuration, the wireless network is initially susceptible to what type of attacks? (Choose 2)

  • Encryption cracking
  • Ofline dictionary attacks
  • Layer 3 peer-to-peer
  • Application eavesdropping
  • Session hijacking
  • Layer 1 DoS

  Reveal Answer Answer: B, ,F Next Question

• Question 6

  

  Role-Based Access Control (RBAC) allows a WLAN administrator to perform what network function?

  • Minimize traffic load on an AP by requiring mandatory admission control for use of the Voice access category.
  • Allow access to specific files and applications based on the user's WMM access category.
  • Provide two or more user groups connected to the same SSID with different levels of network privileges.
  • Allow simultaneous support for multiple EAP types on a single access point.

  Reveal Answer Answer: C Next Question

• Question 7

  

  You perform a protocol capture using Wireshark and a compatible 802.11 adapter in Linux. When viewing the capture, you see an auth req frame and an auth rsp frame. Then you see an assoc req frame and an assoc rsp frame. Shortly after, you see DHCP communications and then ISAKMP protocol packets. What security solution is represented?

  • 802.1X/EAP-TTLS
  • Open 802.11 authentication with IPSec
  • 802.1X/PEAPv0/MS-CHAPv2
  • WPA2-Personal with AES-CCMP
  • EAP-MD5

  Reveal Answer Answer: B Next Question

• Question 8

  

  Given: John Smith uses a coffee shop's Internet hot-spot (no authentication or encryption) to transfer funds between his checking and savings accounts at his bank's website. The bank’s website uses the HTTPS protocol to protect sensitive account information. While John was using the hot-spot, a hacker was able to obtain John’s bank account user ID and password and exploit this information.What likely scenario could have allowed the hacker to obtain John’s bank account user ID and password?

  • John's bank is using an expired X.509 certificate on their web server. The certificate is on John's Certificate Revocation List (CRL), causing the user ID and password to be sent unencrypted.
  • John uses the same username and password for banking that he does for email. John used a POP3 email client at the wireless hot-spot to check his email, and the user ID and password were not encrypted.
  • John accessed his corporate network with his IPSec VPN software at the wireless hot-spot. An IPSec VPN only encrypts data, so the user ID and password were sent in clear text. John uses the same username and password for banking that he does for his IPSec VPN software.
  • The bank’s web server is using an X.509 certificate that is not signed by a root CA, causing the user ID and password to be sent unencrypted.
  • Before connecting to the bank’s website, John’s association to the AP was hijacked. The attacker intercepted the HTTPS public encryption key from the bank’s web server and has decrypted John’s login credentials in near real-time.

  Reveal Answer Answer: B Next Question

• Question 9

  

  Given: You have implemented strong authentication and encryption mechanisms for your enterprise802.11 WLAN using 802.1X/EAP with AES-CCMP.For users connecting within the headquarters office, what other security solution will provide continuous monitoring of both clients and APs with 802.11-specific tracking?

  • IPSec VPN client and server software
  • Internet firewall software
  • Wireless intrusion prevention system
  • WLAN endpoint agent software
  • RADIUS proxy server

  Reveal Answer Answer: C Next Question

• Question 10

  

  You have been recently hired as the wireless network administrator for an organization spread across seven locations. They have deployed more than 100 APs, but they have not been managed in either an automated or manual process for more than 18 months. Given this length of time, what is one of the first things you should evaluate from a security perspective?

  • The channel widths configured
  • The channels in use
  • The VLANs in use
  • The firmware revision

  Reveal Answer Answer: D Next Question

Page: 1 / 24
Total Questions: 119

Previous Page Next Page