Question 1

Which of the following information on a wireless LAN is encrypted and WEP-enabled?
A)The MAC addresses of the frame
B)Beacon management frames
C)The data payload of the frame
D)Shared Key challenge plaintext

Accepted Answer

The data payload of the frame on a wireless LAN is encrypted and WEP-enabled.
Key Takeaway: All stations on the wireless segment can see the source and destination MAC addresses. All layer 3 information, such as IP addresses and the data payload is encrypted. Shared Key authentication issues the plaintext challenge in clear text and only the response is encrypted.

Question 2

Which of the following are the three types of filtering that can be performed on a wireless LAN?
A)MAC address, manufacturer hardware, and SSID filtering
B)Protocol, SSID, and WEP filtering
C)SSID, MAC address, and Protocol filtering
D)WEP, 802.11 standard, and manufacturer hardware filtering

Accepted Answer

The three types of filtering that can be performed on a wireless LAN are SSID, MAC address, and Protocol filtering.
Key Takeaway: SSID filtering should be done to segment the network. SSID filtering does not present any real level of security. MAC filters are effective for home and small office wireless LANs where managing lists of MAC addresses is feasible. Protocol filters should be used as a means of bandwidth control.

Question 3

Why is SSID filtering not considered a secure form of access control?
A)SSID is uni-casted in the clear to every access point beacon by default.
B)The SSID of a wireless LAN client must match the SSID on the access point in order for the client to authenticate and associate to the access point.
C)SSID of a network can be easily found out using a protocol analyzer.
D)SSID encryption is easy to decrypt using freeware utilities.

Accepted Answer

SSID filtering is not considered a secure form of access control because a network SSID can be easily found out using a protocol analyzer.
Key Takeaway: SSID is sent as part of each beacon frame and probe response frame. A protocol analyzer is computer software or hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams flow across the network, the sniffer captures each packet, and if needed, decodes and analyzes its content according to the appropriate RFC or other specifications.

Question 4

Which of the following is the best solution to mitigate a jamming attack?
A)Use a spectrum analyzer to locate the RF source and then remove it.
B)Increase the power on the wireless LAN to overpower the jamming signal.
C)Shut down the wireless LAN segment and wait for the jamming signal to dissipate.
D)Arrange for the FCC to shut down the jamming signal's transmitter.

Accepted Answer

The best solution for a jamming attack is to use a spectrum analyzer to locate the RF source and then remove it.
Key Takeaway: Jamming is one of many exploits used to compromise the wireless environment. It denies service to authorized users as legitimate traffic is jammed by the overwhelming frequencies of illegitimate traffic. You should find and remove the jamming signal. If you are not able to remove the signal, use the wireless LAN in another frequency spectrum to avoid the interference.

Question 5

Why should access points be connected to switches instead of hubs?
A)Hubs are faster than switches and can handle high-utilization networks.
B)Hubs are full duplex and switches are only half duplex.
C)Hubs are broadcast devices and pose an unnecessary security risk.
D)Access points are not capable of full-duplex mode.

Accepted Answer

Access points should be connected to switches instead of hubs because hubs are broadcast devices and pose an unnecessary security risk.
Hubs are broadcast devices that pass all information to all of their ports. If access points are connected to hub ports, all packets on the wire will also be broadcasted across the wireless segment, giving hackers more information about the network than is absolutely necessary.

Question 6

Which of the following should you use to reduce the time taken to rotate WEP keys across an enterprise network?
A)Distributed Encryption Key Server
B)Router Access Control List
C)Centralized Encryption Key Server
D)Filter Application Server

Accepted Answer

You should use the Centralized Encryption Key Server to reduce the time taken to rotate WEP keys across an enterprise network.
Key Takeaway: Having a single server generate and rotate encryption keys across the entire network reduces the amount of time the administrator has to devote to managing WEP on a wireless LAN.

Question 7

Where should you position the enterprise wireless gateway on the wired network segment?
A)Between the access point and the wired network upstream
B)Between the access point and the wireless network clients
C)Between the switch and the router on the wireless network segment
D)In place of a regular access point on the wireless LAN segment

Accepted Answer

You should position the enterprise wireless gateway between the access point and the wired network upstream on the wired network segment.
Key Takeaway: An enterprise wireless gateway has no wireless segments. These gateways have a downstream and upstream wired connection that allows them to act as a gateway or firewall of sorts. Wireless LAN clients must be authenticated through an enterprise wireless gateway before the packets are passed upstream into the network.

Question 8

Which of the following specifies why a site survey is a prime requirement for installing a wireless LAN?
A)To justify the need for a wireless LAN
B)To determine the range, coverage, and potential RF interference sources
C)To enable the RF equipment to operate in accordance with the manufacturer's specifications
D)To ensure there is some documentation on the wireless LAN

Accepted Answer

Site survey is a prime requirement for installing a wireless LAN, since it determines the range, coverage, and potential RF interference sources.
Key Takeaway: A wireless site survey, also called an RF site survey or wireless survey, is the process of planning and designing a wireless network. This ensures that a wireless solution will deliver the required wireless coverage, data rates, network capacity, roaming capability, and QoS. The survey involves a site visit to run tests to determine the presence of RF interference and identify optimum installation locations for access points.

Question 9

Which of the following specifies how networks use the 802.1x protocol to control network access?
A)Per-user
B)Per-port
C)Per-MAC Address
D)Per-SSID

Accepted Answer

Networks use the 802.1x protocol to control network access on a per-port basis.
Key Takeaway: The 802.1x standard provides port-based access control. It stops a port until the edge device authenticates the client. Once authenticated, the port is forwarded so that clients can establish a connection with the edge device and pass packets across the network.

Question 10

Which of the following statements is not true regarding wireless LAN security?
A)WEP cannot provide a complete security solution.
B)A wireless environment protected with only WEP is not a secure environment.
C)The 802.11 standard specifies user authentication methods.
D)User authentication is the weakest link in a wireless LAN.

Accepted Answer

The statement that is not true regarding wireless LAN security is that the 802.11 standard specifies user authentication methods.
Key Takeaway: User authentication is not specified in the 802.11 standard. The manufacturer opts to provide user authentication. User authentication is also the weakest link in a wireless LAN. You cannot rely on WEP as an end-to-end wireless LAN security solution.

Question 11

Which of the following wireless LAN user authentication methods provides maximum security?
A)Device independent user names and passwords
B)SSID
C)MAC addresses
D)SSID and MAC address

Accepted Answer

You should use device independent user names and passwords to provide maximum security during wireless LAN user authentication.
Key Takeaway: You should never indicate the hardware resources when authenticating wireless LAN users. This makes it easy for a hacker to hack the logon credentials based on the hardware resource you are using. Instead, user authentication should be done based on username and passwords that are independent of devices.

Question 12

Which of the following is not a good reason to implement centralized encryption key servers?
A)Centralized key generation
B)Centralized key distribution
C)Centralized key coding and encryption
D)Reduced key management overhead

Accepted Answer

Centralized key coding and encryption is not a good reason to implement centralized encryption key servers.
Key Takeaway: Encryption key servers are used to perform the same tasks an administrator does. The only difference is that they do it much faster and in an efficient manner. These help create and distribute encryption keys quickly and easily.

Question 13

Which of the following should not be considered as a potential RF obstruction?
A)Fire doors
B)A group of Wireless LAN users
C)Metal blinds
D)Metal-mesh windows

Accepted Answer

A group of Wireless LAN users should not be considered as a potential RF obstruction.
Key Takeaway: A metal object should always be considered as an RF construction. Metal objects can cause multipath or signal blockage. Groups of wireless users should never be considered as an RF obstruction.

Question 14

Which of the following parameters should you record to perform a site survey?
A)Microwave energy levels
B)Noise floor
C)Signal-to-noise ratio
D)Noise margin

Accepted Answer

You should record the signal-to-noise ratio to perform a site survey.
Key Takeaway: Signal-to-noise ratio, or SNR, is a measure used to quantify how much a signal has been corrupted by noise. It is defined as the ratio of signal power to the noise power corrupting the signal. A ratio higher than 1:1 indicates more signal than noise. You should have enough information about the SNR to perform a site survey.

Question 15

Which of the following should be tested during an RF site survey?
A)RF coverage with stationery vehicles
B)RF coverage with microwave oven OFF
C)RF coverage with 2.4 GHz phone ON
D)RF coverage with 2.4 GHz phone OFF

Accepted Answer

You should test the site for RF coverage with the 2.4 GHz phone on during a site survey.
Key Takeaway: Many cordless telephones use the 2.4 GHz frequency; the frequency at which Wi-Fi standards 802.11b, 802.11g, and 802.11n operate. This can cause a significant decrease in speed or sometimes the total blocking of the Wi-Fi signal when a conversation on the phone takes place. Some of the ways to avoid this is to use the Buy DECT 6.0, 1.9 GHz, 5.8 GHz or 900 MHz phones, use VoIP/WiFi phones, and test several different Wi-Fi channels to avoid the phone channels.

Question 16

Which of the following items should not be recorded as part of an RF site survey?
A)A/C power outlets and grounding points
B)Names of all wireless LAN users
C)Potential RF obstructions
D)Potential RF sources

Accepted Answer

The names of all wireless LAN users should not be recorded as part of an RF site survey.
Key Takeaway: An RF site survey consists of identifying the RF coverage and dead spots. It also includes identifying potential RF interference sources and re-positioning them. An RF survey should not include details about WLAN users.

Question 17

Which of the following best defines a data rate boundary?
A)It is the point at which the data rate is decreased or increased to the next acceptable rate in order to maintain the fastest viable RF link.
B)It is the line after which data is no longer passed to the wireless LAN infrastructure.
C)It is the boundary between 2 separate wireless LAN RF coverage cells.
D)It is the square areas of coverage denoted on the facility floor plan where access points are installed.

Accepted Answer

Data rate boundary is the point at which the data rate is decreased or increased to the next acceptable rate in order to maintain the fastest viable RF link.
Key Takeaway: Data rate boundary is an imaginary line where the data rate changes speeds to maintain the fastest possible viable RF link between a client and an access point.

Question 18

How many access points does a basic service set have?
A)1
B)2
C)3
D)Unlimited

Accepted Answer

A basic service set has 1 access point.
Key Takeaway: A basic service set can have a maximum of one access point. The cell around this access point is where client stations can connect to an access point. This basic service set mostly connects to a wired LAN.

Question 19

Which of the following specifies when you should use an Omni-directional antenna?
A)All horizontal directions from the antenna should form a coverage zone.
B)A specific direction from the antenna should form the coverage zone.
C)More than 5 miles of coverage zone is required in a single direction.
D)For short range coverage of clients who are stationary

Accepted Answer

Omni-directional antennas are used when all horizontal directions from the antenna should form a coverage zone.
Key Takeaway: An Omni-directional antenna is an antenna system that radiates power uniformly in one plane with a directive pattern shape in a perpendicular plane. This provides complete coverage in the shape of a doughnut horizontally around the antenna. Omni-directional antennas are constructed using co-linear dipole arrays.

Question 20

Which of the following best defines antenna beamwidth?
A)Width of the antenna main element
B)Width of the RF signal beam that the antenna transmits
C)Width of the mounting beam on which the antenna is mounted
D)Width of the beam of the RF signal relative to the Earth's surface

Accepted Answer

Antenna beamwidth is the width of the RF signal beam that the antenna transmits.
Key Takeaway: Beamwidth refers to the angle of transmission, both horizontal and vertical, from an antenna. Antenna beamwidth is also known as the half-power beamwidth. It is the angle of an antenna pattern or beam over which the relative power is at or above 50% of the peak power.

Quiz 1: Certified Wireless Network Administrator (CWNA)

Which of the following information on a wireless LAN is encrypted and WEP-enabled?

Which of the following are the three types of filtering that can be performed on a wireless LAN?

Why is SSID filtering not considered a secure form of access control?

Which of the following is the best solution to mitigate a jamming attack?

Why should access points be connected to switches instead of hubs?

Which of the following should you use to reduce the time taken to rotate WEP keys across an enterprise network?

Where should you position the enterprise wireless gateway on the wired network segment?

Which of the following specifies why a site survey is a prime requirement for installing a wireless LAN?

Which of the following specifies how networks use the 802.1x protocol to control network access?

Which of the following statements is not true regarding wireless LAN security?

Which of the following wireless LAN user authentication methods provides maximum security?

Which of the following is not a good reason to implement centralized encryption key servers?

Which of the following should not be considered as a potential RF obstruction?

Which of the following parameters should you record to perform a site survey?

Which of the following should be tested during an RF site survey?

Which of the following items should not be recorded as part of an RF site survey?

Which of the following best defines a data rate boundary?

How many access points does a basic service set have?

Which of the following specifies when you should use an Omni-directional antenna?

Which of the following best defines antenna beamwidth?