CWSP-208 CWNP Exam Lab Questions

TKIP (Temporal Key Integrity Protocol) is a pairwise encryption method introduced with WPA to enhance WEP security. TKIP can protect:

D. Data frames: These are the core unicast data transmissions between clients and access points.

F. QoS Data frames: These are a subtype of data frames supporting 802.11e/WMM enhancements and are also protected under TKIP.

Incorrect:

A & B. TKIP does not support robust management frame protection. Management frame protection is handled by 802.11w with AES-CCMP and BIP.

C & E. Control frames and ACKs are never encrypted, as they need to be read by all stations regardless of encryption status.

In public hotspots like coffee shops, the best way to reduce legal risk is to require users to acknowledge an Acceptable Use Policy (AUP) via a captive portal before granting network access. This approach:

Provides a legally binding acknowledgment that users agree not to misuse or engage in criminal activity

Maintains an open venue while limiting liability

Other options, like using WPA2-Enterprise or blocking ports, are either impractical for public use or ineffective at reducing underlying legal exposure.

ABC Corporation already uses PKI and smart cards. EAP-TLS:

Is a certificate-based authentication protocol.

Integrates seamlessly with PKI infrastructure.

Is supported and certified by the Wi-Fi Alliance.

Incorrect:

A. EAP-FAST uses PACs, not certificates.

C. PEAPv0/EAP-MSCHAPv2 does not use certificates on the client side and is less secure.

D. LEAP is deprecated and insecure.

E. PEAPv0/EAP-TLS is not a standardized combination.

F. EAP-TTLS/MSCHAPv2 requires password-based authentication inside a tunnel, not certificate-based authentication.