CWNP CWSP-205 Actual Free Exam Questions & Community Discussion

Exam Code/Number: CWSP-205
Exam Name/Title: Certified Wireless Security Professional (CWSP)
Certification Provider: CWNP
Corresponding Certification: CWSP Certification

Exam Questions: 119
Updated On: Jul 21, 2026

Question #1

What statement accurately describes the functionality of the IEEE 802.1X standard?

A. Port-based access control with support for authenticated-user VLANs only

B. Port-based access control with EAP encapsulation over the LAN (EAPoL)

C. Port-based access control with dynamic encryption key management and distribution

D. Port-based access control with mandatory support of AES-CCMP encryption

E. Port-based access control, which allows three frame types to traverse the uncontrolled port: EAP, DHCP, and DNS.

Discussion 0

Correct Answer: B Vote an answer

Question #2

What statements are true about 802.11-2012 Protected Management Frames? (Choose 2)

A. Authentication, association, and acknowledgment frames are protected if management frame protection is enabled, but deauthentication and disassociation frames are not.

B. 802.11w frame protection protects against some Layer 2 denial-of-service (DoS) attacks, but it cannot prevent all types of Layer 2 DoS attacks.

C. When frame protection is in use, the PHY preamble and header as well as the MAC header are encrypted with 256- or 512-bit AES.

D. Management frame protection protects disassociation and deauthentication frames.

Discussion 0

Correct Answer: B,D Vote an answer

Question #3

Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United
States. 802.1X/EAP is ABC's preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources.
What security best practices should be followed in this deployment scenario?

A. RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.

B. APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

C. An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.

D. Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.

Discussion 0

Correct Answer: C Vote an answer

Question #4

Given: John Smith uses a coffee shop's Internet hot-spot (no authentication or encryption) to transfer funds between his checking and savings accounts at his bank's website. The bank's website uses the HTTPS protocol to protect sensitive account information. While John was using the hot-spot, a hacker was able to obtain John's bank account user ID and password and exploit this information.
What likely scenario could have allowed the hacker to obtain John's bank account user ID and password?

A. John's bank is using an expired X.509 certificate on their web server. The certificate is on John's Certificate Revocation List (CRL), causing the user ID and password to be sent unencrypted.

B. The bank's web server is using an X.509 certificate that is not signed by a root CA, causing the user ID and password to be sent unencrypted.

C. John accessed his corporate network with his IPSec VPN software at the wireless hot-spot. An IPSec VPN only encrypts data, so the user ID and password were sent in clear text. John uses the same username and password for banking that he does for his IPSec VPN software.

D. John uses the same username and password for banking that he does for email. John used a POP3 email client at the wireless hot-spot to check his email, and the user ID and password were not encrypted.

E. Before connecting to the bank's website, John's association to the AP was hijacked. The attacker intercepted the HTTPS public encryption key from the bank's web server and has decrypted John's login credentials in near real-time.

Discussion 0

Correct Answer: D Vote an answer

Question #5

Given: A large enterprise is designing a secure, scalable, and manageable 802.11n WLAN that will support thousands of users. The enterprise will support both 802.1X/EAP-TTLS and PEAPv0/MSCHAPv2. Currently, the company is upgrading network servers as well and will replace their existing Microsoft IAS implementation with Microsoft NPS, querying Active Directory for user authentication.
For this organization, as they update their WLAN infrastructure, what WLAN controller feature will likely be least valuable?

A. WPA2-Enterprise authentication/encryption

B. SNMPv3 support

C. WIPS support and integration

D. Internal RADIUS server

E. 802.1Q VLAN trunking

Discussion 0

Correct Answer: D Vote an answer

Question #6

You have an AP implemented that functions only using 802.11-2012 standard methods for the WLAN communications on the RF side and implementing multiple SSIDs and profiles on the management side configured as follows:
1.SSID: Guest - VLAN 90 - Security: Open with captive portal authentication - 2 current clients
2.SSID: ABCData - VLAN 10 - Security: PEAPv0/EAP-MSCHAPv2 with AES-CCMP - 5 current clients
3.SSID: ABCVoice - VLAN 60 - Security: WPA2-Personal - 2 current clients
Two client STAs are connected to ABCData and can access a media server that requires authentication at the Application Layer and is used to stream multicast video streams to the clients.
What client stations possess the keys that are necessary to decrypt the multicast data packets carrying these videos?

A. All clients that are associated to the AP with a shared GTK, which includes ABCData and ABCVoice.

B. All clients that are associated to the AP using the ABCData SSID

C. Only the members of the executive team that are part of the multicast group configured on the media server

D. All clients that are associated to the AP using any SSID

Discussion 0

Correct Answer: B Vote an answer

Download Free CWNP CWSP-205 Demo

Simply submit your e-mail address below to get started with our free demo of your CWNP CWSP-205 exam.