CWNP-Certified Wireless Security Professional (CWSP)

1.

You are troubleshooting an application that installs application routes into the routing table of your core network routers. Which serviceability feature helps to troubleshoot transient application routes?

Import all users from the LDAP server into a RADIUS server with an LDAP-to-RADIUS conversion tool. Implement an X.509 compliant Certificate Authority and enable SSL queries on the LDAP server. Mirror the LDAP server to a RADIUS database within a WLAN controller and perform daily backups to synchronize the user databases. Implement a RADIUS server and query user authentication requests through the LDAP server.

2.

Which combination is valid for a running Extensible Network Controller instance?

The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication. The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication. The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller. The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

3.

Which programming language is used to develop Chef recipes?

Group Temporal Keys 4-Way Handshake PLCP Cyclic Redundancy Check (CRC) Encrypted Passphrase Protocol (EPP) Integrity Check Value (ICV)

4.

Which CLI command can you use on an Cisco IOS-based device to see the CPU utilization impact of a connected onePK application?

Phase Shift Key (PSK) Group Master Key (GMK) Pairwise Master Key (PMK) Group Temporal Key (GTK) PeerKey (PK)

5.

Which option describes the best way to see the Thrift messages between a onePK-based application and a network element without enabling debugs?

They are used to pad Message 1 and Message 2 so each frame contains the same number of bytes. The IEEE 802.11 standard requires that all encrypted frames contain a nonce to serve as a Message Integrity Check (MIC). They are added together and used as the GMK, from which the GTK is derived. They are input values used in the derivation of the Pairwise Transient Key. They allow the participating STAs to create dynamic keys while avoiding sending unicast encryption keys across the wireless medium.

6.

How many significant requirements must a business comply with for PCI Standards Council certification?

Group Key Handshake 802.1X/EAP authentication DHCP Discovery 4-Way Handshake Passphrase-to-PSK mapping

7.

Which command shows the amount of input/output bytes used between an onePK application and the target device(s)?

Supplicant devices LDAP server Controller-based APs WLAN controller RADIUS server

8.

Which technology helps to determine the average UDP latency between two places in the network?

Implement a captive portal with an acceptable use disclaimer Block TCP port 25 and 80 outbound on the Internet router Require client STAs to have updated firewall and antivirus software Allow only trusted patrons to use the WLAN Use a WIPS to monitor all traffic and deauthenticate malicious stations

9.

Which Cisco onePK SDK function prints user-friendly error messages?

Generating passwords for WLAN infrastructure equipment logins Generating PMKs that can be imported into 802.11 RSN-compatible devices Generating secret keys for RADIUS servers and WLAN infrastructure devices Generating passphrases for WLAN systems secured with WPA2-Personal Generating dynamic session keys used for IPSec VPNs

10.

You are responsible for deploying a Cisco onePK designed network infrastructure. Which four options are Cisco recommended best practices when defining naming conventions? (Choose four).

Intruders can send spam to the Internet through the guest VLAN. Peer-to-peer attacks can still be conducted between guest users unless application-layer monitoring and filtering are implemented. Unauthorized users can perform Internet-based network attacks through the WLAN. Guest users can reconfigure AP radios servicing the guest VLAN unless unsecure network management protocols (e.g. Telnet, HTTP) are blocked. Once guest users are associated to the WLAN, they can capture 802.11 frames from the corporate VLANs.

CWNP-Certified Wireless Security Professional (CWSP)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

CWNP-Certified Wireless Security Professional (CWSP)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner