What disadvantage does EAP-TLS have when compared with PEAPv0 EAP/MSCHAPv2 as an 802.11 WLAN security solution?

• A.Fast/secure roaming in an 802.11 RSN is significantly longer when EAP-TLS is in use.
• B.EAP-TLS does not protect the client's username and password inside an encrypted tunnel.
• C.EAP-TLS cannot establish a secure tunnel for internal EAP authentication.
• D.EAP-TLS is supported only by Cisco wireless infrastructure and client devices.
• E.EAP-TLS requires extensive PKI use to create X.509 certificates for both the server and all clients, which increases administrative overhead.

Comment: *

Name: *

Email: *

Verification: *

Given: You support a coffee shop and have recently installed a free 802.11ac wireless hot-spot for the benefit of your customers. You want to minimize legal risk in the event that the hot-spot is used for illegal Internet activity.
What option specifies the best approach to minimize legal risk at this public hot-spot while maintaining an open venue for customer Internet access?

• A.Configure WPA2-Enterprise security on the access point
• B.Block TCP port 25 and 80 outbound on the Internet router
• C.Require client STAs to have updated firewall and antivirus software
• D.Allow only trusted patrons to use the WLAN
• E.Use a WIPS to monitor all traffic and deauthenticate malicious stations
• F.Implement a captive portal with an acceptable use disclaimer

Comment: *

Name: *

Email: *

Verification: *

Given: ABC Corporation's 802.11 WLAN is comprised of a redundant WLAN controller pair (N+1) and 30 access points implemented in 2004. ABC implemented WEP encryption with IPSec VPN technology to secure their wireless communication because it was the strongest security solution available at the time it was implemented. IT management has decided to upgrade the WLAN infrastructure and implement Voice over Wi-Fi and is concerned with security because most Voice over Wi-Fi phones do not support IPSec.
As the wireless network administrator, what new security solution would be best for protecting ABC's data?

• A.Migrate corporate data clients to WPA-Enterprise and segment Voice over Wi-Fi phones by assigning them to a different frequency band.
• B.Migrate corporate data and Voice over Wi-Fi devices to WPA2-Enterprise with fast secure roaming support, and segment Voice over Wi-Fi data on a separate VLAN.
• C.Migrate to a multi-factor security solution to replace IPSec; use WEP with MAC filtering, SSID hiding, stateful packet inspection, and VLAN segmentation.
• D.Migrate all 802.11 data devices to WPA-Personal, and implement a secure DHCP server to allocate addresses from a segmented subnet for the Voice over Wi-Fi phones.

Comment: *

Name: *

Email: *

Verification: *

You must locate non-compliant 802.11 devices. Which one of the following tools will you use and why?

• A.A spectrum analyzer, because it can show the energy footprint of a device using WPA differently from a device using WPA2.
• B.A spectrum analyzer, because it can decode the PHY preamble of a non-compliant device.
• C.A protocol analyzer, because it can be used to view the spectrum energy of non-compliant 802.11 devices, which is always different from compliant devices.
• D.A protocol analyzer, because it can be used to report on security settings and regulatory or rule compliance

Comment: *

Name: *

Email: *

Verification: *

When implementing a WPA2-Enterprise security solution, what protocol must the selected RADIUS server support?

• A.LWAPP, GRE, or CAPWAP
• B.IPSec/ESP
• C.EAP
• D.CCMP and TKIP
• E.LDAP

Comment: *

Name: *

Email: *

Verification: *