CWSP-208 Exam Dumps : Certified Wireless Security Professional (CWSP)

The AKM (Authentication and Key Management) Suite List field within the RSN Information Element defines which authentication methods are supported by the AP. This field distinguishes between PSK (Pre-Shared Key) and Enterprise (802.1X) modes:

AKM Suite OUI 00-0F-AC:1 = WPA2-Personal (PSK)

AKM Suite OUI 00-0F-AC:2 = WPA2-Enterprise (802.1X)

By examining this field in Beacon or Probe Response frames, a protocol analyzer can determine the authentication method enforced by the BSS.

ABC Corporation already uses PKI and smart cards. EAP-TLS:

Is a certificate-based authentication protocol.

Integrates seamlessly with PKI infrastructure.

Is supported and certified by the Wi-Fi Alliance.

Incorrect:

A. EAP-FAST uses PACs, not certificates.

C. PEAPv0/EAP-MSCHAPv2 does not use certificates on the client side and is less secure.

D. LEAP is deprecated and insecure.

E. PEAPv0/EAP-TLS is not a standardized combination.

F. EAP-TTLS/MSCHAPv2 requires password-based authentication inside a tunnel, not certificate-based authentication.

Open networks with captive portals do not provide link-layer encryption, so:

A. Man-in-the-Middle (MitM): Attackers can intercept or modify traffic between the user and the legitimate network (especially before HTTPS negotiation).

B. Wi-Fi phishing: Evil twin APs may mimic the legitimate hotspot and show a fake captive portal, stealing user credentials or prompting malicious downloads.

Incorrect:

C. Management interface exploits target device admin panels, not typical client users.

D. UDP port redirection and

E. IGMP snooping are network-layer behaviors, not common user-targeted attacks.