CWNP CWNP Certifications CWNA-108 Questions & Answers

• Question 141:

  In an 802.11 2.4 GHz system, what 22 MHz channels are considered non-overlapping?

  A. 7 and 11

  B. 2 and 8

  C. 1 and 5

  D. 4 and 6

  Correct Answer: B

• Question 142:

  A dual-band 802.11ac AP must be powered by PoE. As a class 4 device, what power level should be received at the AP?

  A. 30 W

  B. 12.95 W

  C. 25.5 W

  D. 15.4 W

  Correct Answer: C

• Question 143:

  You have been tasked with creating a wireless link between two buildings on a single campus. The link must support at least 150 Mbps data rates. What kind of WLAN technology role should you deploy?

  A. WPAN

  B. IBSS

  C. Wireless bridging

  D. Access BSS

  Correct Answer: C

• Question 144:

  Lynne runs a small hotel, and as a value added service for his customers he has implemented a Wi-Fi hotspot. Lynne has read news articles about how hackers wait at hotspots trying to take advantage of unsuspecting users. He wants to avoid this problem at his hotel.

  What is an efficient and practical step that Lynne can take to decrease the likelihood of active attacks on his customers' wireless computers?

  A. Enable station-to-station traffic blocking by the access points in the hotel.

  B. Implement Network Access Control (NAC) and require antivirus and firewall software along with OS patches.

  C. Implement an SSL VPN in the WLAN controller that initiates after HTTPS login.

  D. Require EAP-FAST authentication and provide customers with a username/password on their receipt.

  Correct Answer: A

• Question 145:

  What statement about 802.3, Clause 33 Power over Ethernet is true?

  A. When using CAT5 cabling, you increase the maximum draw available to the PD over that available with CAT6.

  B. Only endpoint PSEs are supported.

  C. Only midspan PSEs are supported.

  D. The lowest voltage drop is achieved when using CAT6 cable instead of Cat5 or CAT5e.

  Correct Answer: D

• Question 146:

  You are deploying a WLAN with the access points configured for 10 mW of output power on the 2.4 GHz radios and 20 mW of output power on the 5GHz radios. Some semi-directional antennas are also in use. What kind of deployment is described?

  A. SOHO

  B. Residential

  C. High density

  D. Standard office

  Correct Answer: A

• Question 147:

  You are the network administrator for ABC Company. Your manager has recently attended a wireless security seminar. The seminar speaker taught that a wireless network could be hidden from potential intruders if you disabled the broadcasting of the SSID in Beacons and configured the access points not to respond to Probe Request frames that have a null SSID field.

  Your manager suggests implementing these security practices. What response should you give to this suggestion?

  A. Any 802.11 protocol analyzer can see the SSID in clear text in frames other than Beacons frames. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames.

  B. To improve security by hiding the SSID, the AP and client stations must both be configured to remove the SSID from association request and response frames. Most WLAN products support this.

  C. Any tenants in the same building using advanced penetration testing tools will be able to obtain the SSID by exploiting WPA EAPOL-Key exchanges. This poses an additional risk of exposing the WPA key.

  D. This security practice prevents manufacturers' client utilities from detecting the SSID. As a result, the SSID cannot be obtained by attackers, except through social engineering, guessing, or use of a WIPS.

  Correct Answer: A

• Question 148:

  What cipher suite is specified by the 802.11-2016 standard and is not deprecated?

  A. Wired Equivalent Privacy

  B. Temporal Key Integrity Protocol

  C. Counter Mode with CBC-MAC Protocol

  D. Extensible Authentication Protocol

  Correct Answer: C

• Question 149:

  ABC Company is planning a point-to-multipoint outdoor bridge deployment with standalone (autonomous) 802.11 bridge units. 802.1X/EAP will be used for bridge authentication. A Linux-based RADIUS server will be used for authentication. What device in the bridge implementation acts as the 802.1X Authenticator?

  A. The Ethernet switch

  B. The RADIUS server

  C. All non-root bridges

  D. The root bridge

  Correct Answer: D

• Question 150:

  To ease user complexity, your company has implemented a single SSID for all employees. However, the network administrator needs a way to control the network resources that can be accessed by each employee based in their department.

  What WLAN feature would allow the network administrator to accomplish this task?

  A. RBAC

  B. WPA2

  C. WIPS

  D. SNMP

  Correct Answer: A