CWNP Exam CWSP-207 Topic 1 Question 6 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 6
Topic #: 1

Given: ABC Company has a WLAN controller using WPA2-Enterprise with PEAPv0/MS-CHAPv2 and AES-CCMP to secure their corporate wireless dat

a. They wish to implement a guest WLAN for guest users to have Internet access, but want to implement some security controls. The security requirements for the hot-spot include:

Cannot access corporate network resources

Network permissions are limited to Internet access

All stations must be authenticated

What security controls would you suggest? (Choose the single best answer.)

AImplement separate controllers for the corporate and guest WLANs.

BUse a WIPS to deauthenticate guest users when their station tries to associate with the corporate WLAN.

CConfigure access control lists (ACLs) on the guest WLAN to control data types and destinations.

DRequire guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.

EForce all guest users to use a common VPN protocol to connect.

Show Suggested Answer

Suggested Answer: D

by Georgeanna at Jun 21, 2024, 05:21 AM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

6 months ago

D. Requiring a captive portal HTTPS login page and separate VLANs seems like the most secure and comprehensive solution for the guest WLAN.

upvoted 0 times

Ressie

5 months ago

Implementing separate controllers for the corporate and guest WLANs might be a good idea to further enhance security measures.

upvoted 0 times

...

Josephine

5 months ago

It's important to restrict access to only Internet resources for guest users to prevent any unauthorized access to the corporate network.

upvoted 0 times

...

Janna

5 months ago

I agree, using a captive portal HTTPS login page and separate VLANs would definitely help ensure guest users are isolated from the corporate network.

upvoted 0 times

...

Jamal

6 months ago

I think the best option would be D) Require guest users to authenticate via a captive portal HTTPS login page and place the guest WLAN and the corporate WLAN on different VLANs.

upvoted 0 times

...