CWNP CWNP Certifications CWDP-304 Questions & Answers

• Question 61:

  What term refers to the security practice of obfuscating actual data from unintended receivers as the data crosses the transmission medium?

  Response:

  A. Confidentiality

  B. Authentication

  C. Integrity

  D. Accounting

  E. Nonrepudiation

  Correct Answer: A

• Question 62:

  In a PC-based spectrum analyzer, what data chart identifies the overall RF utilization of a specific frequency in the environment being surveyed?

  A. FFT Max Hold

  B. FFT Average

  C. Swept Spectrogram

  D. Duty cycle

  Correct Answer: C

• Question 63:

  In an RSN requiring low-latency reassociations and no fast secure roaming protocols, what security solutions are ideal for protecting VoWiFi communication?(Choose all that apply.)

  Response:

  A. WPA2-Personal

  B. WPA-Personal

  C. WPA2-Enterprise

  D. WEP

  E. 802.1X/EAP

  Correct Answer: AC

  WPA2-Personal and WPA2-Enterprise are ideal security solutions for protecting VoWiFi communication in an RSN requiring low-latency reassociations and no fast secure roaming protocols. WPA2-Personal uses a pre-shared key (PSK) to authenticate and encrypt the communication between the VoWiFi device and the access point. WPA2-Enterprise uses 802.1X/EAP to authenticate the VoWiFi device and the RADIUS server, and then derives a unique encryption key for each session. Both WPA2- Personal and WPA2-Enterprise use AES-CCMP as the encryption algorithm, which provides strong security and low overhead. WPA2-Personal and WPA2-Enterprise also support key caching andpre-authentication mechanisms, which reduce the latency and disruption during reassociations. These features are essential for maintaining the quality of service and user experience for VoWiFi communication. WPA-Personal, WEP, and 802.1X/EAP are not ideal security solutions for protecting VoWiFi communication in an RSN requiring low-latency reassociations and no fast secure roaming protocols. WPA-Personal uses TKIP as the encryption algorithm, which is less secure and more computationally intensive than AES-CCMP. WPA-Personal also does not support key caching and pre-authentication mechanisms, which increase the latency and disruption during reassociations. WEP is an outdated and insecure encryption algorithm that can be easily cracked by attackers. WEP also does not support any authentication or key management mechanisms, which expose the VoWiFi communication to various attacks. 802.1X/EAP is an authentication framework, not a security solution. 802.1X/EAP alone does not provide any encryption or key management for the VoWiFi communication. 802.1X/EAP must be combined with a robust encryption algorithm, such as AES-CCMP, to provide adequate security for VoWiFi communication. References: CWNP, CWDP Certified Wireless Design Professional Official Study Guide, Security Considerations for Voice over Wi-Fi (VoWiFi) Systems, Top 13 VoIP Security Issues and How to Combat Them

• Question 64:

  A museum wants to offer Wi-Fi to its visitors. One of their requirements is to have the APs blend into the design of the museum. What should you do to meet this requirement?

  Response:

  A. Use a plastic cover that could blend in with the environment

  B. Lock the AP inside of a metal box

  C. Place the APs in between walls and I-beams

  D. Use an 802.11b AP, so it looks old enough to be in a museum

  Correct Answer: A

• Question 65:

  Your customer is using PSK as their only authentication. They have an industry requirement to move to a stronger solution. Your recommendation is to move to a certificate-based type of authentication where both the client and server require certificates. Which EAP type would be the best fit?

  A. EAP-FAST

  B. EAP-TTLS

  C. EAP-TLS

  D. PEAP

  Correct Answer: C

• Question 66:

  What document is typically created to launch a project?

  Response:

  A. Project Charter

  B. Budget

  C. Bill of Materials

  D. Work Breakdown Structure

  Correct Answer: A

• Question 67:

  Switches and APs have already been chosen by your customer. All switches support 802.3bz MultiGig interfaces and APs are 4x4:4 802.11ac wave 2 capable of using dual-5GHz and have one MultiGig interface. Some cable drops for the APs will run for more than 180.5 feet (or 55 meters). To support MultiGig, what is the best choice of cabling?

  A. Cat-5

  B. Cat-6

  C. Cat-5e

  D. Cat-6a

  Correct Answer: D

• Question 68:

  What frequency and power did 802.11y provide?

  Response:

  A. 3.65?.7 GHz, 20W EIRP

  B. 5.65?.7 GHz, 5W EIRP

  C. 5.25?.35 GHz, 10W EIRP

  D. 3.7?.75 GHz, 15W EIRP

  Correct Answer: A

• Question 69:

  You are validating association capabilities from clients to an 802.1X/EAP secure SSID. The RADIUS server's IP address is 10.100.50.25 and the default RADIUS authentication port is used. When testing them, none of the clients are able to associate to the SSID. Troubleshooting the WLAN infrastructure, you found out that the server is up and the RADIUS service is up as well, but the authenticator is not able to communicate properly with the server. What's your next troubleshooting step?

  A. Verify that the shared secret between the authenticator and the RADIUS server is correct

  B. Reboot the clients

  C. Reboot the server

  D. Restart the RADIUS service

  Correct Answer: A

• Question 70:

  Given: For this fill-in the blank question, each answer option contains an answer for the first and second blanks, separated by a dash "--". Choose the answer option that correctly fills in both blanks in the following sentence.

  A WLAN may use 802.11 admission control to ________, and admission control requirements are configured separately for each ________.

  A. Block stations with inadequate security parameters -- SSID

  B. Identify voice-enabled wireless devices -- AP radio (that is, 2.4 GHz or 5 GHz)

  C. Regulate the available bandwidth resources -- Access Category

  D. Mark ingress and egress frames with priority values -- TCP/IP port

  Correct Answer: C