CWNP-Certified Wireless Security Professional (CWSP) Set 1

1.

You are deploying a Cisco Unified Communications Manager solution with MGCP gateways at multiple locations. Which firewall and ACL configuration must you perform to allow the MCGP gateways to function correctly?

Require Port Address Translation (PAT) on each laptop. Require secure applications such as POP, HTTP, and SSH. Require VPN software for connectivity to the corporate network. Require WPA2-Enterprise as the minimal WLAN security solution.

2.

The VCS Expressway can be configured with security controls to safeguard external calls and endpoints. One such option is the control of trusted endpoints via a whitelist. Where is this option enabled?

EAP-TTLS sends encrypted supplicant credentials to the authentication server, but EAP-TLS uses unencrypted user credentials. EAP-TTLS supports client certificates, but EAP-TLS does not. EAP-TTLS does not require an authentication server, but EAP-TLS does. EAP-TTLS does not require the use of a certificate for each STA as authentication credentials, but EAP-TLS does.

3.

What is the standard Layer 3 DSCP media packet value that should be set for Cisco TelePresence endpoints?

EAP-MD5 EAP-TLS LEAP PEAPv0/MSCHAPv2 EAP-TTLS

4.

When you configure QoS on VCS, which settings do you apply if traffic through the VCS should be tagged with DSCP AF41?

A frequency hopping device is being used as a signal jammer in 5 GHz A low-power wideband RF attack is in progress in 2.4 GHz, causing significant 802.11 interference An 802.11g AP operating normally in 2.4 GHz An 802.11a AP operating normally in 5 GHz

5.

What is the default DSCP/PHB for TelePresence video conferencing packets in Cisco Unified Communications Manager?

STA1 and STA2 are using different cipher suites. STA2 has retransmissions of EAP frames. STA1 is a reassociation and STA2 is an initial association. STA1 is a TSN, and STA2 is an RSN. STA1 and STA2 are using different EAP types.

6.

Which option indicates the best QoS parameters for interactive video?

EAP-FAST EAP-MD5 EAP-TLS PEAPv0/EAP-MSCHAPv2 EAP-TTLS

7.

In the case of a VCS cluster, which configuration element is recommended for endpoint H.323 registration?

Implement an SSID with WPA2-Personal that allows both AES-CCMP and TKIP clients to connect. Implement an SSID with WPA-Personal that allows both AES-CCMP and TKIP clients to connect. Implement two separate SSIDs on the AP Implement an SSID with WPA2-Personal that sends all broadcast traffic using AES-CCMP and unicast traffic using either TKIP or AES-CCMP.

8.

In a distributed call processing network with locations-based CAC, calls are routed to and from intercluster trunks. Which trunk type is implemented in this network?

Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use. EAP-TLS does not protect the client's username and password inside an encrypted tunnel. EAP-TLS cannot establish a secure tunnel for internal EAP authentication. EAP-TLS is supported only by Cisco wireless infrastructure and client devices. EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.

9.

Which symbol is required for globalized call routing?

RSNA connections require TKIP or CCMP. RSNA connections require BIP and do not support TKIP, CCMP or WEP. RSNA connections require CCMP and do not support TKIP or WEP. RSNA connections do not work in conjunction with VLANs.

10.

Applications compiled by Java are better adaptive to different operating systems like Windows and Linux than applications compiled by C compiler. Which option describes why Java applications are more independent from the OS than C applications?

A data retrieval protocol used by an authentication service such as RADIUS An IEEE X.500 standard compliant database that participates in the 802.1X port-based access control process A SQL compliant authentication service capable of dynamic key generation and distribution A role-based access control protocol for filtering data to/from authenticated stations. An Authentication Server (AS) that communicates directly with, and provides authentication for, the Supplicant.

CWNP-Certified Wireless Security Professional (CWSP) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

CWNP-Certified Wireless Security Professional (CWSP) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner