CWNA CH 10,11,12,13 UPDATED ACTUAL
Exam Questions and CORRECT Answers
Which encryption cipher takes one character and replaces it with another character? - CORRECT
ANSWER - stream cipher
Which of the following standards provides a greater degree of security by implementing port-
based authentication? - CORRECT ANSWER - IEEE 802.1X
Which protocol was developed by Netscape for securely transmitting documents over the
Internet? - CORRECT ANSWER - SSL
Which wireless attack detection method audits usage by using the normal processes and actions
as the standard? - CORRECT ANSWER - behavior based monitoring
Which WIDS/WIPS traffic monitor uses dedicated sensors for scanning the RF for attacks? -
CORRECT ANSWER - overlay sensor
Which security solution uses rotating keys for encryption? - CORRECT ANSWER -
Dynamic WEP
_____ was designed to prevent an attacker from conducting active or passive man in the middle
attacks. - CORRECT ANSWER - message integrity check
What type of device is needed to continuously monitor the RF airspace for traffic and can be
used to discover rouge APs? - CORRECT ANSWER - wireless probe
Which of the following is a foreign yet friendly AP? - CORRECT ANSWER - Known AP
, Which of the following is the block cipher used IEEE 802.11i/WPA2? - CORRECT
ANSWER - AES
_____ functions as a wrapper around WEP by adding an additional layer of security but still
preserving WEP's basic functionality. - CORRECT ANSWER - TKIP
What is the term given to the end of the tunnel between VPN devices? - CORRECT
ANSWER - endpoint
A _____ monitors network traffic to immediately react to block a malicious attack. - CORRECT
ANSWER - WIPS wireless intrusion protection systems
Which wireless LAN security technology offers the advantage of being implemented without
upgrading device drivers or AP firmware? - CORRECT ANSWER - Dynamic WEP
Which of the following is an attack that compares encrypted versions of common words against
data captured through wireless transmissions? - CORRECT ANSWER - Dictionary attack
In cryptography, a _____ is a value that has been previously communicated between two parties.
- CORRECT ANSWER - preshared key
During the CCMP encryption process, the data payload and the ____ are encrypted to create the
ciphertext. - CORRECT ANSWER - MIC (message integrity check)
What is the IEEE 802.11i wireless security model also known as? - CORRECT
ANSWER - Robust security network
Which term is used to describe a framework for transporting authentication protocols in an IEEE
802.1x network? - CORRECT ANSWER - EAP (extensible authentication protocol)
Exam Questions and CORRECT Answers
Which encryption cipher takes one character and replaces it with another character? - CORRECT
ANSWER - stream cipher
Which of the following standards provides a greater degree of security by implementing port-
based authentication? - CORRECT ANSWER - IEEE 802.1X
Which protocol was developed by Netscape for securely transmitting documents over the
Internet? - CORRECT ANSWER - SSL
Which wireless attack detection method audits usage by using the normal processes and actions
as the standard? - CORRECT ANSWER - behavior based monitoring
Which WIDS/WIPS traffic monitor uses dedicated sensors for scanning the RF for attacks? -
CORRECT ANSWER - overlay sensor
Which security solution uses rotating keys for encryption? - CORRECT ANSWER -
Dynamic WEP
_____ was designed to prevent an attacker from conducting active or passive man in the middle
attacks. - CORRECT ANSWER - message integrity check
What type of device is needed to continuously monitor the RF airspace for traffic and can be
used to discover rouge APs? - CORRECT ANSWER - wireless probe
Which of the following is a foreign yet friendly AP? - CORRECT ANSWER - Known AP
, Which of the following is the block cipher used IEEE 802.11i/WPA2? - CORRECT
ANSWER - AES
_____ functions as a wrapper around WEP by adding an additional layer of security but still
preserving WEP's basic functionality. - CORRECT ANSWER - TKIP
What is the term given to the end of the tunnel between VPN devices? - CORRECT
ANSWER - endpoint
A _____ monitors network traffic to immediately react to block a malicious attack. - CORRECT
ANSWER - WIPS wireless intrusion protection systems
Which wireless LAN security technology offers the advantage of being implemented without
upgrading device drivers or AP firmware? - CORRECT ANSWER - Dynamic WEP
Which of the following is an attack that compares encrypted versions of common words against
data captured through wireless transmissions? - CORRECT ANSWER - Dictionary attack
In cryptography, a _____ is a value that has been previously communicated between two parties.
- CORRECT ANSWER - preshared key
During the CCMP encryption process, the data payload and the ____ are encrypted to create the
ciphertext. - CORRECT ANSWER - MIC (message integrity check)
What is the IEEE 802.11i wireless security model also known as? - CORRECT
ANSWER - Robust security network
Which term is used to describe a framework for transporting authentication protocols in an IEEE
802.1x network? - CORRECT ANSWER - EAP (extensible authentication protocol)
