Free CWSP-207 Questions for CWNP Wireless Security Professional (CWSP) CWSP-207 Exam as PDF & Practice Test Engine

Exam Code/Number: CWSP-207
Exam Name/Title: CWNP Wireless Security Professional (CWSP)
Certification Provider: CWNP
Corresponding Certification: CWNP CWSP

Exam Questions: 122
Updated On: Jul 05, 2026

Question #1

Given: You have a Windows laptop computer with an integrated, dual-band, Wi-Fi compliant adapter. Your laptop computer has protocol analyzer software installed that is capable of capturing and decoding 802.11ac data.
What statement best describes the likely ability to capture 802.11ac frames for security testing purposes?

A. Integrated 802.11ac adapters are not typically compatible with protocol analyzers in Windows laptops. It is often best to use a USB adapter or carefully select a laptop with an integrated adapter that will work.

B. All integrated 802.11ac adapters will work with most protocol analyzers for frame capture, including the Radio Tap Header.

C. The only method available to capture 802.11ac frames is to perform a remote capture with a compatible access point.

D. Only Wireshark can be used to capture 802.11ac frames as no other protocol analyzer has implemented the proper frame decodes.

E. Laptops cannot be used to capture 802.11ac frames because they do not support MU-MIMO.

Discussion 0

Correct Answer: A Vote an answer

Question #2

You have been recently hired as the wireless network administrator for an organization spread across seven locations. They have deployed more than 100 APs, but they have not been managedin either an automated or manual process for more than 18 months. Given this length of time, what is one of the first things you should evaluate from a security perspective?

A. The channels in use

B. The VLANs in use

C. The firmware revision

D. The channel widths configured

Discussion 0

Correct Answer: C Vote an answer

Question #3

What statement accurately describes the functionality of the IEEE 802.1X standard?

A. Port-based access control with EAP encapsulation over the LAN (EAPoL)

B. Port-based access control with support for authenticated-user VLANs only

C. Port-based access control, which allows three frame types to traverse the uncontrolled port: EAP, DHCP, and DNS.

D. Port-based access control with dynamic encryption key management and distribution

E. Port-based access control with mandatory support of AES-CCMP encryption

Discussion 0

Correct Answer: A Vote an answer

Question #4

Given: In a security penetration exercise, a WLAN consultant obtains the WEP key of XYZ Corporation's wireless network. Demonstrating the vulnerabilities of using WEP, the consultant uses a laptop running a software AP in an attempt to hijack the authorized user's connections. XYZ's legacy network is using 802.11n APs with 802.11b, 11g, and 11n client devices.
With this setup, how can the consultant cause all of the authorized clients to establish Layer 2 connectivity with the software access point?

A. All WLAN clients will reassociate to the consultant's software AP if the consultant's software AP provides the same SSID on any channel with a 10 dB SNR improvement over the authorized AP.

B. When the RF signal between the clients and the authorized AP is temporarily disrupted and the consultant's software AP is using the same SSID on a different channel than the authorized AP, the clients will reassociate to the software AP.

C. A higher SSID priority value configured in the Beacon frames of the consultant's software AP will take priority over the SSID in the authorized AP, causing the clients to reassociate.

D. If the consultant's software AP broadcasts Beacon frames that advertise 802.11g data rates that are faster rates than XYZ's current 802.11b data rates, all WLAN clients will reassociate to the faster AP.

Discussion 0

Correct Answer: B Vote an answer

Question #5

Given: In XYZ's small business, two autonomous 802.11ac APs and 12 client devices are in use with WPA2-Personal.
What statement about the WLAN security of this company is true?

A. An unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user's 4-Way Handshake.

B. Because WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.

C. Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.

D. A successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client.

E. An unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic.

Discussion 0

Correct Answer: D Vote an answer

Question #6

An attack is under way on the network. The attack is preventing users from accessing resources required for business operations, but the attacker has not gained access to any files or data. What kind of attack is described?

A. ASLEAP

B. DoS

C. Hijacking

D. Man-in-the-middle

Discussion 0

Correct Answer: B Vote an answer

Free CWSP-207 Questions for CWNP Wireless Security Professional (CWSP) CWSP-207 Exam as PDF & Practice Test Engine

Download Free CWNP CWSP-207 Demo