CWNP CWDP-305 Practice Test Questions Answers

Outdoor antenna installations are particularly susceptible to lightning strikes due to their elevated positions and exposure to the elements.Lightning surge suppressionis essential to protect both the antenna and the connected equipment from the high voltages and currents associated with lightning-induced surges.

Implementing proper lightning protection involves installing surge protectors and ensuring adequate grounding of the antenna system. This not only safeguards the equipment but also enhances the overall reliability and safety of the wireless network infrastructure.

Comprehensive and Detailed Explanation:

While SSID hiding might seem like a security measure, it's not effective because certain management frames must include the SSID, making it discoverable. Specifically, theAssociation Requestframe always includes the SSID. This frame is sent by a client device when it attempts to associate with an access point (AP), and it must specify the SSID to identify the desired network. Therefore, even if the SSID is hidden in beacon frames, it can still be detected through association requests.

Beacon frames: Typically used by APs to advertise their presence; can be configured to omit the SSID.

Probe request/response frames: Used during active scanning; the SSID may or may not be included.

Authentication response frames: Do not necessarily include the SSID.

Comprehensive and Detailed Explanation:

Passive RFID tags lack an internal power source and rely on energy transmitted from an RFID reader to power up and communicate. In WLAN designs supporting RTLS, passive tags do not directly communicate with the WLAN infrastructure. Instead, they depend on tag readers to capture their information and relay it to the location server. This design consideration is crucial for accurate asset tracking and management.

WPA2-Personal and WPA2-Enterprise are ideal security solutions for protecting VoWiFi communication in an RSN requiring low-latency reassociations and no fast secure roaming protocols. WPA2-Personal uses a pre-shared key (PSK) to authenticate and encrypt the communication between the VoWiFi device and the access point. WPA2-Enterprise uses 802.1X/EAP to authenticate the VoWiFi device and the RADIUS server, and then derives a unique encryption key for each session. Both WPA2-Personal and WPA2-Enterprise use AES-CCMP as the encryption algorithm, which provides strong security and low overhead. WPA2-Personal and WPA2-Enterprise also support key caching and pre-authentication mechanisms, which reduce the latency and disruption during reassociations. These features are essential for maintaining the quality of service and user experience for VoWiFi communication.

WPA-Personal, WEP, and 802.1X/EAP are not ideal security solutions for protecting VoWiFi communication in an RSN requiring low-latency reassociations and no fast secure roaming protocols. WPA-Personal uses TKIP as the encryption algorithm, which is less secure and more computationally intensive than AES-CCMP. WPA-Personal also does not support key caching and pre-authentication mechanisms, which increase the latency and disruption during reassociations. WEP is an outdated and insecure encryption algorithm that can be easily cracked by attackers. WEP also does not support any authentication or key management mechanisms, which expose the VoWiFi communication to various attacks. 802.1X/EAP is an authentication framework, not a security solution. 802.1X/EAP alone does not provide any encryption or key management for the VoWiFi communication. 802.1X/EAP must be combined with a robust encryption algorithm, such as AES-CCMP, to provide adequate security for VoWiFi communication. References: CWNP, CWDP Certified Wireless Design Professional Official Study Guide, Security Considerations for Voice over Wi-Fi (VoWiFi) Systems, Top 13 VoIP Security Issues and How to Combat Them