Pass with professional CWNA-106 actual quiz materials

You are using a tool that allows you to see signal strength for all APs in the area with a visual representation. It showsyou SSIDs available and the security settings for each SSID.
It allows you to filter by frequency band to see only 2.4 GHz networks or only 5 GHz networks. No additional features are available. What kind of application is described?

• A. Protocol analyzer
• B. WLAN discovery tool
• C. Spectrum analyzer
• D. Site survey utility

A WLAN transmitter that emits a 200 mW signal is connected to a cable with 3 dB loss.
If the cable is connected to an antenna with 10 dBi gain, what is the EIRP at the antenna element?

• A. 26 dBm
• B. 30 dBm
• C. 13 dBm
• D. 20 dBm
• E. 10 dBm

What facts are true regarding controllers and APs in a Split MAC architecture? (Choose 2)

• A. Using centralized data forwarding, APs never tag Ethernet frames with VLAN identifiers or 802.1p CoS.
• B. In a distributed data forwarding model, the AP handles frame encryption and decryption.
• C. Management and data frame types must be processed locally by the AP, while control frame types must be sent to the controller.
• D. With 802.1X/EAP security, the AP acts as the supplicant and the controller acts as the authenticator.
• E. An IP tunnel is established between the AP and controller for AP management and control functions.

You are the network administrator for ABC Company. Your manager has recently attended a wireless security seminar. The seminar speaker taught that a wireless network could be hidden from potential intruders if you disabled the broadcasting of the SSID in Beacons and configured the access points not to respond to Probe Request frames that have a null SSID field.
Your manager suggests implementing these security practices. What response should you give to this suggestion? (Choose 2)

• A. Although it does not benefit the security posture, hiding the SSID in Beacons and Probe
  Response frames can be helpful for preventing some users (such as guests) from attempting to connect tothe corporate network.
• B. To improve security by hiding the SSID, the AP and client stations must both be configured to remove the SSID from association request and response frames. Most WLAN products support this.
• C. This security practice prevents manufacturers' client utilities from detecting the SSID. As a result,the SSID cannot be obtained by attackers, except through social engineering, guessing, or use of a WIPS.
• D. Any 802.11 protocol analyzer can see the SSID in clear text inframes other than
  Beacons and Probe Responseframes. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames.
• E. Any tenants in the same building using advanced penetration testing tools will be able to obtain the SSID by exploiting WPA EAPOL-Key exchanges. This poses an additional risk of exposingthe WPA key.

What is an advantage of using WPA2-Personal instead of WEP-128 as a security solution for 802.11 networks?

• A. WPA2-Personal usesdynamic encryption keys, and WEP-128 uses static keys.
• B. WPA2-Personal uses CCMP for encryption, and WEP-128 uses TKIP for encryption.
• C. WPA2-Personal uses 802.1X/EAP for authentication, and WEP-128 uses preshared keys.
• D. WPA2-Personal is basedon IEEE 802.11 industry standards, but WEP is not.