CWNP CWSP-208 Exam With Confidence Using Practice Dumps

Peer-to-peer blocking (also called client isolation) is useful in open or public WLANs to prevent devices from communicating directly with each other.

B. In public hot-spots, isolating users helps protect against malware spread, snooping, and attacks from nearby devices.

Incorrect:

A. In home networks, peer-to-peer communication is often desired for file sharing.

C. Voice over Wi-Fi may rely on peer communication (e.g., multicast).

D. In university setups using multicast, peer-to-peer restrictions could hinder functionality.

ABC Corporation already uses PKI and smart cards. EAP-TLS:

Is a certificate-based authentication protocol.

Integrates seamlessly with PKI infrastructure.

Is supported and certified by the Wi-Fi Alliance.

Incorrect:

A. EAP-FAST uses PACs, not certificates.

C. PEAPv0/EAP-MSCHAPv2 does not use certificates on the client side and is less secure.

D. LEAP is deprecated and insecure.

E. PEAPv0/EAP-TLS is not a standardized combination.

F. EAP-TTLS/MSCHAPv2 requires password-based authentication inside a tunnel, not certificate-based authentication.

Hijacking attacks often rely on exploiting client behavior during signal disruption. Clients will seek better connections when RF is weak or interrupted. An attacker may:

Disrupt the signal (e.g., with a deauth attack)

Present a rogue access point (evil twin) with stronger signal

Trick the client into associating with the rogue AP, hijacking the session

Incorrect:

B. There is no standard 120-second timer behavior.

C. Loss of connectivity typically triggers reassociation and reauthentication.

D. Direct client-to-client connections are not required in infrastructure mode.

E. Band selection logic varies and is unrelated to hijacking attacks.