Free CWNP CWSP-207 Exam Questions

Become CWNP Certified with updated CWSP-207 exam questions and correct answers

Page: 1 / 25

Total 121 Questions | Updated On: Jul 15, 2025

Add To Cart

Question 1

As the primary security engineer for a large corporate network, you have been asked to author a new security policy for the wireless network. While most client devices support 802.1X authentication, some legacy devices still only support passphrase/PSK-based security methods. When writing the 802.11 security policy, what password-related items should be addressed?

A : MSCHAPv2 passwords used with EAP/PEAPv0 should be stronger than typical WPA2-PSK passphrases.

B : Password complexity should be maximized so that weak WEP IV attacks are prevented.

C : Static passwords should be changed on a regular basis to minimize the vulnerabilities of a PSK-based authentication.

D : Certificates should always be recommended instead of passwords for 802.11 client authentication.

E : EAP-TLS must be implemented in such scenarios.

Answer: C

Question 2

Given: You support a coffee shop and have recently installed a free 802.11ac wireless hot-spot for the benefit of your customers. You want to minimize legal risk in the event that the hot-spot is used for illegal Internet activity. What option specifies the best approach to minimize legal risk at this public hot-spot while maintaining an open venue for customer Internet access?

A : Configure WPA2-Enterprise security on the access point

B : Block TCP port 25 and 80 outbound on the Internet router

C : Require client STAs to have updated firewall and antivirus software

D : Allow only trusted patrons to use the WLAN

E : Use a WIPS to monitor all traffic and deauthenticate malicious stations

F : Implement a captive portal with an acceptable use disclaimer

Answer: F

Question 3

What is a primary criteria for a network to qualify as a Robust Security Network (RSN)?

A : Token cards must be used for authentication.

B : Dynamic WEP-104 encryption must be enabled.

C : WEP may not be used for encryption.

D : WPA-Personal must be supported for authentication and encryption.

E : WLAN controllers and APs must not support SSHv1.

Answer: C

Question 4

Given: Your company has just completed installation of an IEEE 802.11 WLAN controller with 20 controller-based APs. The CSO has specified PEAPv0/EAP-MSCHAPv2 as the only authorized WLAN authentication mechanism. Since an LDAP-compliant user database was already in use, a RADIUS server was installed and is querying authentication requests to the LDAP server. Where must the X.509 server certificate and private key be installed in this network?

A : Supplicant devices

B : LDAP server

C : Controller-based APs

D : WLAN controller

E : RADIUS server

Answer: E

Question 5

Given: ABC Company has recently installed a WLAN controller and configured it to support WPA2-Enterprise security. The administrator has configured a security profile on the WLAN controller for each group within the company (Marketing, Sales, and Engineering). How are authenticated users assigned to groups so that they receive the correct security profile within the WLAN controller?

A : The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

B : The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

C : The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

D : The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

Answer: B

Page: 1 / 25

Total 121 Questions | Updated On: Jul 15, 2025

Add To Cart