CWNP PW0-204 問題集

質問 1：
Which protocols that are used to manage WLAN infrastructure devices support authentication and encryption? (Choose three)
A. HTTPS
B. POP3/SSL
C. SSH2
D. LDAP
E. RIPv2
F. SNMPv3
正解：A,C,F
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following attacks on wireless LAN is performed to shut down the wireless network?
A. Active attack
B. Jamming attack
C. Passive attack
D. Man-in-the-middle attack
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
The following numbered items show the contents of the four frames exchanged during the 4-way handshake.
-Encrypted GTK sent -Confirmation of temporal key installation -Announce sent from authenticator to supplicant, unprotected by MIC -Snonce sent from applicant to authenticator, protected by MIC.
Arrange the frames in the correct sequence beginning with the start of the 4-way handshake
A. 2, 3, 4, 1
B. 4, 3, 1, 2
C. 3, 4, 1, 2
D. 1, 2, 3, 4
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Exhibit

What is illustrated on the RF spectrum analyzer?
A. A low-power narrow band RF attacks is in progress on channel 11, causing significant 802.11
interference.
B. An HR/DSSS AP and an ERP AP are both operating on channel 11 simultaneously.
C. An ERP AP operating normally on channel 11.
D. A frequency hoping device is being used as a signal jammer on channel 11 only.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You work as a Network Administrator for NetTech Inc. The company has a Windows 2003 domain-based network. The company has a main office and several branch offices. You want to centralize theadministration. Therefore, you implement a Remote Authentication Dial-In Service (RADIUS) server. Each branch office supports its own Routing and Remote Access Server. You remove the default remote access policy, as you want to secure communications and implement a single policy that requires all dial-up
communications to use a 40-bit encryption. What will you do to accomplish this?
Each correct answer represents a part of the solution. Choose two.
A. Set the level of encryption to No Encryption in the remote access policy.
B. Create a remote access policy on the Routing and Remote Access Server of each branch office.
C. Create a remote access policy on the RADIUS server.
D. Set the level of encryption to Basic in the remote access policy.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Exhibit

What WLAN security function can be performed by the illustrated software utility? (Choose 3)
A. Generating passphrases for WLAN system secured with WPA2-personal
B. Generating passwords for WLAN infrastructure equipment logins
C. Generating random EAP-TTLS session keys
D. Generating high-entropy EAP-TLS passphrase for client authentication
E. Generating secret keys for RADIUS server and WLAN infrastructure devices
F. Generating PMKs that can be imported into 802.11 RSN systems
正解：A,B,E
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You have been hired by ABC Corporation to perform a WLAN security audit. ABC's network manager has attended a one-day manufacturer's seminar on WLAN security and, in your opinion, knows only enough to ask good questions of a WLAN security professional. The network manager asks you about the specific advantages of TKIP over WEP. You explain that TKIP has the following advantages over WEP: (Choose two)
A. Replacement of CRC-32 with ICV-32 to prevent brute-force attacks against RC4
B. Inclusion of SHA-HMAC authentication to prevent man-in-the-middle attacks
C. Inclusion of a strong MIC to prevent in-transit frame tampering and replay attacks
D. Replacement of IVs with LIVs to prevent attacks against weak passwords
E. Improved per-packet keying to prevent weak IVs from being used to derive the WEP key
正解：C,E
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which of the following types of attacks come under the category of hacker attacks?
Each correct answer represents a complete solution. Choose all that apply.
A. Explanation:
IP (Internet Protocol) address spoofing is an attack in which an attacker creates the IP packets with a forged (spoofed) source IP address with the purpose of concealing the identity of the sender or impersonating another computing system. The basic protocol for sending data over the Internet and many other computer networks is the Internet Protocol ("IP"). The header of each IP packet contains, among other things, the numerical source and destination address of the packet. The source address is normally the address that the packet was sent from. By forging the header so it contains a different address, an attacker can make it appear that the packet was sent by a different machine. The machine that receives spoofed packets will send response back to the forged source address, which means that this technique is mainly used when the attacker does not care about the response or the attacker has some way of guessing the response. Password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system. A common approach is to repeatedly try guesses for the password. The purpose of password cracking might be to help a user recover a forgotten password (though installing an entirely new password is less of a security risk, but involves system administration privileges), to gain unauthorized access to a system, or as a preventive measure by system dministrators to check for easily crackable passwords. On a file-by file basis, password cracking is utilized to gain access to digital evidence for which a judge has allowed access but the particular file's access is restricted.
B. Teardrop
C. IP address spoofing
D. Password cracking
E. Smurf
正解：C,D
解説: (Topexam メンバーにのみ表示されます)