思い立ったらすぐ始めたい、そんな方にぴったりなのがCertShikenのCWSP-207対策です。お支払い完了後すぐにダウンロードでき、CWNP Wireless Security Professional (CWSP)の学習を今日からスタートできます。

CWNP CWSP-207 試験概要:

認定ベンダー:	CWNP
試験名:	CWNP Wireless Security Professional（CWSP）
試験番号:	CWSP-207
受験料:	$349.99 USD
出題数:	60
関連資格:	CWNA CWISA CWDP CWAP CWNE
認定の有効期間:	3年間
合格点:	70%
対応言語:	英語
試験時間:	90 分
試験形式:	単一選択式多肢選択問題, シナリオ設定型問題
推奨トレーニング:	CWSP-207公式学習ガイド CWSP eラーニング講座
受験申し込み:	CWNP公式サイト Prometric受験申込ページ
サンプル問題:
受験方法:	リモート監督付きのオンライン受験またはPrometric試験会場での対面受験
前提条件:	有効なCWNA認定資格を保有していること
公式シラバスのURL:	https://www.cwnp.com/uploads/cwsp-207-objectives-2022.pdf

CWNP CWSP-207 試験シラバストピック:

CWSP-207試験の疑問を解決するFAQ

CWNP Wireless Security Professional (CWSP) 認定 CWSP-207 試験問題：

問題 #1

What 802.11 WLAN security problem is directly addressed by mutual authentication?

A. Disassociation attacks
B. Wireless hijacking attacks
C. Weak Initialization Vectors
D. Offline dictionary attacks
E. Weak password policies
F. MAC spoofing

問題 #2

What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?

A. EAP-TLS cannot establish a secure tunnel for internal EAP authentication.
B. EAP-TLS does not protect the client's username and password inside an encrypted tunnel.
C. EAP-TLS is supported only by Cisco wireless infrastructure and client devices.
D. EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.
E. Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.

問題 #3

When monitoring APs within a LAN using a Wireless Network Management System (WNMS), what secure protocol may be used by the WNMS to issue configuration changes to APs?

A. PPTP
B. 802.1X/EAP
C. IPSec/ESP
D. SNMPv3
E. TFTP

問題 #4

Given: WLAN attacks are typically conducted by hackers to exploit a specific vulnerability within a network.
What statement correctly pairs the type of WLAN attack with the exploited vulnerability? (Choose 3)

A. Social engineering attacks are performed to collect sensitive information from unsuspecting users
B. RF DoS attacks prevent successful wireless communication on a specific frequency or frequency range.
C. Management interface exploit attacks are attacks that use social engineering to gain credentials from managers.
D. Zero-day attacks are always authentication or encryption cracking attacks.
E. Association flood attacks are Layer 3 DoS attacks performed against authenticated client stations
F. Hijacking attacks interrupt a user's legitimate connection and introduce a new connection with an evil twin AP.

問題 #5

Given: XYZ Company has recently installed a controller-based WLAN and is using a RADIUS server to query authentication requests to an LDAP server. XYZ maintains user-based access policies and would like to use the RADIUS server to facilitate network authorization.
What RADIUS features could be used by XYZ to assign the proper network permissions to users during authentication? (Choose 2)

A. RADIUS can send a DO-NOT-AUTHORIZE demand to the authenticator to prevent the STA from gaining access to specific files, but may only employ this in relation to Linux servers.
B. The RADIUS server can support vendor-specific attributes in the ACCESS-ACCEPT response, which can be used for user policy assignment.
C. RADIUS can reassign a client's 802.11 association to a new SSID by referencing a username-to-SSID mapping table in the LDAP user database.
D. The RADIUS server can communicate with the DHCP server to issue the appropriate IP address and VLAN assignment to users.
E. RADIUS attributes can be used to assign permission levels, such as read-only permission, to users of a particular network resource.

解説：