CWSP Certified Wireless Security Professional

1.

What is the first configuration step when using Cisco ASDM to configure a new Layer 3/4 inspection policy on the Cisco ASA?

Offline dictionary attacks Application eavesdropping Session hijacking Layer 3 peer-to-peer Encryption cracking

2.

Which feature is not supported on the Cisco ASA 5505 with the Security Plus license?

MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel. When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure. MS-CHAPv2 uses AES authentication, and is therefore secure. MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise. LEAP's use of MS-CHAPv2 is only secure when combined with WEP.

3.

With Cisco ASA active/standby failover, by default, how many monitored interface failures will cause failover to occur?

802.1X/EAP-TTLS WPA2-Personal with AES-CCMP 802.1X/PEAPv0/MS-CHAPv2 EAP-MD5 Open 802.11 authentication with IPSec

4.

Which statement about SNMP support on the Cisco ASA appliance is true?

When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, allWLAN clients will reassociate to the faster AP. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing theclients to reassociate. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNRimprovement over the authorized AP.

5.

Which command option/keyword in Cisco ASA 8.3 NAT configurations makes the NAT policy interface independent?

Certificates should always be recommended instead of passwords for 802.11 client authentication. Password complexity should be maximized so that weak WEP IV attacks are prevented. Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication. EAP-TLS must be implemented in such scenarios. MS-CHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.

6.

On Cisco ASA Software Version 8.4.1 and later, when you configure the Cisco ASA appliance in transparent firewall mode, how is the Cisco ASA management IP address configured?

Require Port Address Translation (PAT) on each laptop. Require secure applications such as POP, HTTP, and SSH. Require VPN software for connectivity to the corporate network. Require WPA2-Enterprise as the minimal WLAN security solution.

7.

Which statement about Cisco ASA multicast routing support is true?

EAP-GTC PEAP EAP-TTLS LEAP H-REAP

8.

Which statement about access list operations on Cisco ASA Software Version 8.3 and later is true?

RC5 stream cipher Block cipher support Sequence counters 32-bit ICV (CRC-32) Michael

9.

A Cisco ASA appliance running software version 8.4.1 has an active botnet traffic filter license with 1 month left on the time-based license. Which option describes the result if a new botnet traffic filter with a 1 year time-based license is activated also?

It does not support a RADIUS server. It is not a valid EAP type. It does not support mutual authentication. It does not support the outer identity.

10.

How many interfaces can a Cisco ASA bridge group support and how many bridge groups can a Cisco ASA appliance support?

The client STAs may communicate over the controlled port in order to authenticate as soon as the Open System authentication completes. The client STAs may communicate over the uncontrolled port in order to authenticate as soon as the Open System authentication completes. The client STAs may use a different, but complementary, EAP type than the AP STAs. The client will be the authenticator in this scenario.

CWSP Certified Wireless Security Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

CWSP Certified Wireless Security Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner