Free CWSP-207 sample questions

Correct answer: The pre-shared key (password) is mismatched between the client and the AP.

The WPA3-SAE (Simultaneous Authentication of Equals) handshake, also known as the Dragonfly handshake, relies on both the client and the AP knowing the same pre-shared key (password). The Commit and Confirm frames are part of a key exchange process that will only succeed if both parties start with the same password. A mismatch will cause the cryptographic checks within the handshake to fail, preventing the establishment of a Pairwise Master Key (PMK) and subsequent association. SAE does not use certificates or a RADIUS server.

Correct answers: All WLAN traffic must be encrypted using, at a minimum, WPA3-Enterprise with CCMP-128.; A network access control (NAC) system must be used to enforce unique, role-based access for all users connecting to the WLAN.

Correct answer: $50,000

The Annualized Loss Expectancy (ALE) is calculated by multiplying the Single Loss Expectancy (SLE) by the Annualized Rate of Occurrence (ARO). In this scenario, the SLE is $500,000. The ARO is the frequency of the event per year, which is once every ten years, or 1/10 = 0.1. Therefore, ALE = SLE * ARO = $500,000 * 0.1 = $50,000.

Correct answer: Reviewing WIPS logs and SIEM alerts for rogue APs and anomalous behavior.

The 'Monitor' phase of the security lifecycle involves ongoing observation and auditing of the network to ensure compliance and detect threats. Reviewing logs from a Wireless Intrusion Prevention System (WIPS) and a Security Information and Event Management (SIEM) system is a core monitoring activity. Developing a policy is part of 'Identify', configuring security settings is part of 'Protect', and performing risk analysis is part of 'Assess'.

Correct answer: False

This statement is false. A fundamental principle of Public Key Infrastructure (PKI) is that the private key never leaves the client device. The client proves its identity by using its private key to process information that can only be verified by the corresponding public key, which is contained in the client's certificate. The RADIUS server validates the client's certificate (checking the signature of the Certificate Authority) and verifies the client's proof of possession of the private key, but it never sees the private key itself.

Correct answer: Opportunistic Wireless Encryption (OWE)

Opportunistic Wireless Encryption (OWE), also known as Wi-Fi Certified Enhanced Open, is specifically designed to provide encryption for open (unauthenticated) networks. It uses a Diffie-Hellman key exchange during the association process to create a unique, individualized encryption key for each client session, protecting users from passive eavesdropping without requiring a password. This perfectly matches the coffee shop's requirements.

Correct answer: aircrack-ng

The `aircrack-ng` tool itself is used for the actual cracking of keys. After capturing the 4-way handshake (typically using `airodump-ng`), the capture file is fed into `aircrack-ng` along with a wordlist (dictionary file). `Aircrack-ng` then iterates through the wordlist, attempting to find the correct PSK. `Airmon-ng` is used to put wireless cards into monitor mode, `airodump-ng` is for capturing packets, and `aireplay-ng` is for injecting packets (e.g., to perform a deauthentication attack to force a handshake).

Correct answer: Using multiple SSIDs, each mapped to a different VLAN, with a RADIUS server dynamically assigning users to the appropriate VLAN and firewall ACLs enforcing inter-VLAN traffic policies.

This is the most robust and scalable solution. Using multiple SSIDs (e.g., 'Corp', 'IoT', 'Guest') allows for different authentication and encryption settings per group. Mapping each SSID to a separate VLAN segments the traffic at Layer 2. A RADIUS server can dynamically assign users/devices to the correct VLAN based on their credentials or attributes (Role-Based Access Control). Finally, a firewall with Access Control Lists (ACLs) is essential for enforcing security policies between the VLANs, such as preventing the Guest and IoT networks from accessing the Corporate network.

Correct answer: The 4-way handshake and EAP authentication messages are exchanged with the new AP within the Authentication and Association frames.

The primary benefit of 802.11r FT is speed. In an 'FT over-the-Air' roam, the client exchanges the necessary security information (the 4-way handshake) with the new target AP as part of the initial management frame exchange (Authentication and Reassociation frames). This eliminates the need for a separate, time-consuming 802.1X/EAP re-authentication with the RADIUS server, drastically reducing roaming time from hundreds of milliseconds to under 50 milliseconds.

Correct answers: The AP is broadcasting a common SSID like 'Free WiFi' or a misspelling of the corporate SSID.; The AP is configured with open authentication, inviting users to connect without a password.