Official Bank
0/60
Page
1/4
CWSP Certified Wireless Security Professional Exam (CWSP-206) - CWNP Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
60
Total Questions
1
Question
Joe’s new laptop is experiencing difficulty connecting to ABC Company’s 802.11 WLAN using 802.1X/EAP PEAPv0. The company’s wireless network administrator assured Joe that his laptop was authorized in the WIPS management console for connectivity to ABC’s network before it was given to him. The WIPS termination policy includes alarms for rogue stations, rogue APs, DoS attacks and unauthorized roaming. What is a likely reason that Joe cannot connect to the network?
Options
A
Joe’s integrated 802.11 radio is sending multiple Probe Request frames on each channel.
B
Joe disabled his laptop’s integrated 802.11 radio and is using a personal PC card radio with a different chipset, drivers, and client utilities.
C
Joe configured his 802.11 radio card to transmit at 100 mW to increase his SNR. The WIPS is detecting this much output power as a DoS attack.
D
An ASLEAP attack has been detected on APs to which Joe’s laptop was trying to associate. The WIPS responded by disabling the APs.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation’s wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user’s connections. XYZ’s legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices. With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?
Options
A
A higher SSID priority value configured in the Beacon frames of the consultant’s software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.
B
All WLAN clients will reassociate to the consultant’s software AP if the consultant’s software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.
C
If the consultant’s software AP broadcasts Beacon frames that advertise 802.11g data rates that
are faster rates than XYZ’s current 802.11b data rates, all WLAN clients will reassociate to the faster AP.
are faster rates than XYZ’s current 802.11b data rates, all WLAN clients will reassociate to the faster AP.
D
When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant’s software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac dat
Options
A
Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.
B
Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.
C
The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.
D
All integrated 802.11ac adapters will work with most protocol analyzers for frame capture,
including the Radio Tap Header.
including the Radio Tap Header.
E
Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
What WLAN client device behavior is exploited by an attacker during a hijacking attack?
Options
A
When the RF signal between a client and an access point is disrupted for more than a few seconds,
the client device will attempt to associate to an access point with better signal quality.
the client device will attempt to associate to an access point with better signal quality.
B
When the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.
C
As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.
D
Client drivers scan for and connect to access point in the 2.4 GHz band before scanning the 5 GHz band.
E
After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
During 802.1X/LEAP authentication, the username is passed across the wireless medium in clear text. From a security perspective, why is this significant?
Options
A
4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.
B
The username is an input to the LEAP challenge/response hash that is exploited, so the username must be known to conduct authentication cracking.
C
The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.
D
The username can be looked up in a dictionary file that lists common username/password combinations.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.