CWSP-206 CWSP Certified Wireless Security Professional Questions and Answers

The username can be looked up in a dictionary file that lists common username/password combinations.

The username is needed for Personal Access Credential (PAC) and X.509 certificate validation.

4-Way Handshake nonces are based on the username in WPA and WPA2 authentication.

The username is an input to the LEAPchallenge/response hash that is exploited, so the username must be known to conduct authentication cracking.

A low-gain patch antenna and terminal emulation software

MAC spoofing software and MAC DoS software

RF jamming device and a wireless radio card

A wireless workgroup bridge and a protocol analyzer

Server credentials

User credentials

RADIUS shared secret

X.509 certificates

Uses SNMP to disable the switch port to which rogue APs connect.

Evil twin attack against a rogue AP.

EAPoL Reject frame flood against a rogue AP.

Deauthentication attack against a classified neighbor AP.

ASLEAP attack against a rogue AP.

The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

802.1X/EAP-TTLS

WPA2-Personal with AES-CCMP

802.1X/PEAPv0/MS-CHAPv2

EAP-MD5

Open 802.11 authentication with IPSec