CWNA-107 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
During a post-implementation survey, you have detected a non-802.11 wireless device transmitting in the area used by handheld 802.11g scanners.
What is the most important factor in determining the impact of this non-802.11 device?

A.Protocols utilized
B.Channel occupied
C.Receive sensitivity
D.Airtime utilization

正解:

Question No : 2
You are performing a post-implementation validation survey.
What basic tool can be used to easily locate areas of high co-channel interference?

A.Throughput tester
B.Access point spectrum analyzer
C.Laptop-based spectrum analyzer
D.Wi-Fi scanner

正解:

Question No : 3
What is the most effective method of testing roaming in relation to 802.11 VoIP handsets?

A.Use the built-in roaming monitor built into all VoIP handsets.
B.Use a protocol analyzer to capture the traffic generated when a laptop roams.
C.Place a call with the handset and move around the facility to test quality during roaming.
D.Use a spectrum analyzer to monitor RF activity during a VoIP call.

正解:

Question No : 4
You are managing a wireless access point in autonomous mode using the Web based interface. You capture traffic during this management task and notice that you can see the HTML code of the Web pages for access point management.
What error in administration could be the cause of the security concern?

A.A VPN with the AP is not established
B.WPA2 is disabled on the WLAN
C.HTTP is in use instead of HTTPS
D.IPsec is not in use of the management connection as recommended

正解:

Question No : 5
ABC Company is planning a point-to-multipoint bridge deployment with standalone (autonomous) 802.11 bridge units. 802.1X/EAP will be used for bridge authentication. A Linux-based RADIUS server will be used for authentication.
What device in the bridge implementation acts as the 802.11X Authenticator?

A.All non-root bridges
B.The root bridge
C.The Ethernet switch
D.The RADIUS server

正解:

Question No : 6
To ease user complexity, your company has implemented a single SSID for all employees.
However, the network administrator needs a way to control the network resources that can be accessed by each employee based in their department.
What WLAN feature would allow the network administrator to accomplish this task?

A.RBAC
B.SNMP
C.WIPS
D.WPA2

正解:

Question No : 7
What cipher suite is specified by the 802.11-2016 standard and is not deprecated?

A.Temporal Key Integrity Protocol
B.Extensible Authentication Protocol
C.Counter Mode with CBC- MAC Protocol
D.Wired Equivalent Privacy

正解:

Question No : 8
You are the network administrator for ABC Company. Your manager has recently attended a wireless security seminar. The seminar speaker taught that a wireless network could be hidden from potential intruders if you disable the broadcasting of the SSID in Beacons and configured the access points not to respond to Probe Request frames that have a null SSID field.
Your manager suggests implementing these security practices.
What response should you give to this suggestion?

A.Any tenants in the same building using advanced penetration testing tools will be able to obtain the SSID by exploiting WPA EAPOL-Key exchanges. This poses an additional risk of exposing the WPA key.
B.Any 802.11 protocol analyzer can see the SSID in clear text in frames other than Beacons frames. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames.
C.To improve security by hiding the SSID, the AP and client stations must both be configured to remove the SSID from association request and response frames. Most VLAN products support this.
D.This security practice prevents manufacturers’ client utilities from detecting the SSI
E.As a result, the SSID cannot be obtained by attackers, except through social engineering, guessing, or use of a WIP

正解:

Question No : 9
What statement describes the authorization component of a AAA implementation?

A.Validating client device credentials against a database.
B.Implementing a WIPS as a full-time monitoring solution to enforce policies.
C.Granting access to specific network services or resources according to a user profile.
D.Verifying that a user is who he says he is.

正解:
Explanation:
Reference http://searchsecurity.techtarget.com/definition/authentication-authorization-and-accounting

Question No : 10
What statement about 802.3, Clause 33 Power over Ethernet is true?

A.Only midspan PSEs are supported.
B.The lowest voltage drop is achieved when using CAT6 instead of Cat5 or CAT5e.
C.Only endpoint PSEs are supported.
D.When using CAT5 cabling, you increase the maximum draw available to the PD over that available with CAT6.

正解:

Question No : 11
Option 43 must be configured to allow access points to locate controllers. In what network service should this option be configured?

A.DHCP
B.LDAP
C.DNS
D.RADIUS

正解:
Explanation:
Reference https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcpoption-43-00.html

Question No : 12
You are deploying a WLAN with the access points configured for 10 mW of output power on the 2.4 GHz radios and 20mW of output power on the 5GHz radios. Some semi-directional antennas are also in use.
What kind of deployment is described?

A.High density
B.SOHO
C.Standard office
D.Residential

正解:

Question No : 13
The requirements for a WLAN you are installing state that it must support unidirectional delays of less than 150 ms and the signal strength at all receivers can be no lower than -67 dBm.
What application is likely used that demands these requirements?

A.E-Mail
B.RTLS
C.VoIP
D.FTP

正解:

Question No : 14
The center frequency of channel 1 in the 2.4 GHz band is 2.412 GHz (2412 MHz).
What is the center frequency of channel 4?

A.2.413
B.2.427
C.2.422
D.2.417

正解:

Question No : 15
In an 802.11 2.4 GHz system, what 22 MHz channels are considered non-overlapping?

A.11 and 6
B.7 and 11
C.1 and 5
D.2 and 8

正解:

CWNP CWNA-107 問題練習