CWSP Secure WLAN Architecture Quiz

1. In a WLAN security architecture, what is the purpose of a captive portal?

To encrypt all wireless traffic

To redirect users for authentication or agreement acceptance

To block all guest access

To manage AP power consumption

2. In WPA3, what protection does 192-bit encryption provide over 128-bit?

Faster data transmission

Stronger resistance to brute-force and quantum attacks

Better compatibility with older devices

Reduced latency

3. What is a rogue access point and why is it a security threat?

A legitimate AP with weak signal; causes slow connections

An unauthorized AP that mimics legitimate networks to intercept traffic

An AP with outdated firmware; causes disconnections

A backup AP that activates during failures

4. Which protocol is used to securely communicate between an AP and a RADIUS server?

HTTP

SSH

RADIUS with MD5 hashing

Telnet

5. In secure WLAN architecture, what is the purpose of a DMZ for wireless access?

To increase wireless signal strength

To isolate guest or untrusted wireless traffic from internal networks

To reduce encryption overhead

To simplify AP configuration

6. What does the Four-Way Handshake in WPA/WPA2 establish between the client and AP?

Initial SSID broadcast

Pairwise Transient Key (PTK) for encryption

RADIUS server credentials

Channel bandwidth settings

7. Which EAP method is commonly used in enterprise WLANs and provides mutual authentication?

EAP-MD5

EAP-TLS

EAP-LEAP

EAP-PEAP

8. In WPA2/WPA3, what is the Pairwise Master Key (PMK) used for?

Encrypting broadcast frames

Deriving session keys for client-AP communication

Authenticating the RADIUS server

Signing beacon frames

9. What is the primary weakness of using MAC address filtering as a sole security measure?

It increases CPU load on APs

MAC addresses can be spoofed

It prevents roaming between APs

It requires RADIUS server integration

10. Which of the following is a best practice for WLAN security deployment?

Disable SSID broadcast for security

Use WPA2-Enterprise with strong authentication

Share the same PSK across all users

Use open networks with MAC filtering only

11. Which authentication method is most commonly used in enterprise WLANs to verify both the client and the access point?

WEP

WPA2-Enterprise with 802.1X

Open authentication

Pre-shared key

12. What does Simultaneous Authentication of Equals (SAE) replace in WPA3?

AES encryption

The PSK-based handshake (PMK generation)

RADIUS authentication

Channel negotiation

13. Which WPA3 feature provides protection for devices connecting to open networks?

TKIP encryption

Opportunistic Wireless Encryption (OWE)

Static WEP keys

Pre-shared key distribution

14. In a secure WLAN design, what is the primary role of network segmentation?

To increase data throughput

To isolate sensitive traffic and limit lateral movement

To reduce the number of APs needed

To improve signal strength

15. What security vulnerability does WEP have that makes it obsolete?

Poor key scheduling and weak IV implementation

Slow encryption speed

Incompatibility with modern devices

Inability to support roaming

16. Which cipher suite is used in WPA2 and WPA3 for strong encryption?

RC4

AES-CCMP

DES

TKIP

17. What is the key difference between WPA2-Personal and WPA2-Enterprise?

Personal uses AES; Enterprise uses TKIP

Personal uses a shared PSK; Enterprise uses 802.1X authentication

Personal supports more clients

Enterprise only works with 5 GHz bands

18. In WPA2-Enterprise, what does the 802.1X protocol handle?

Encryption of data frames

Port-based access control and authentication

AP discovery and association

Channel selection and power management

19. Which encryption protocol is considered the most secure for modern WLANs?

WEP

WPA

WPA3