CWNP CWSP-207 Exam - Topic 1 Question 30 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 30
Topic #: 1

Given: In XYZ's small business, two autonomous 802.11ac APs and 12 client devices are in use with WPA2-Personal.

What statement about the WLAN security of this company is true?

AIntruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.

BA successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client.

CAn unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic.

DAn unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user's 4-Way Handshake.

EBecause WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.

Show Suggested Answer

Suggested Answer: B

by Adaline at Jul 09, 2025, 06:43 AM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Douglass

2 months ago

D seems exaggerated, capturing all that info isn’t easy!

upvoted 0 times

...

Carey

2 months ago

Totally agree with B, that’s how it works!

upvoted 0 times

...

Kenneth

2 months ago

A is true, but it’s not the whole story.

upvoted 0 times

...

Hyman

3 months ago

C is spot on, multicast traffic is a weak point.

upvoted 0 times

...

Avery

3 months ago

Wait, can unauthorized users really eavesdrop? Sounds risky!

upvoted 0 times

...

Marlon

3 months ago

I vaguely remember something about unauthorized users being able to capture data if they have the right information, which makes option D seem plausible.

upvoted 0 times

...

Yaeko

3 months ago

I feel like option C could be true since I recall that multicast and broadcast traffic might not be encrypted, but I'm not completely confident.

upvoted 0 times

...

Rusty

4 months ago

I think option B sounds familiar because we practiced a similar question about capturing the 4-Way Handshake. It seems like a valid concern for security.

upvoted 0 times

...

Louvenia

4 months ago

I remember studying that WPA2-Personal can be vulnerable to offline dictionary attacks, but I'm not sure if that means they can decrypt all traffic.

upvoted 0 times

...

Deeanna

4 months ago

The key is to focus on the security properties of WPA2-Personal and how that applies to the given network configuration. I think I can eliminate a few of these options.

upvoted 0 times

...

Belen

4 months ago

Hmm, I'm a bit unsure about the specifics of how an attacker could exploit the WPA2-Personal protocol in this scenario. I'll need to review my notes.

upvoted 0 times

...

Rozella

4 months ago

I'm pretty confident I know the right answer here. WPA2-Personal has some known vulnerabilities that we should be aware of.

upvoted 0 times

...

Julie

4 months ago

Okay, let's think this through step-by-step. We need to consider the security implications of the WLAN setup described.

upvoted 0 times

...

Shalon

5 months ago

This question seems straightforward, but I want to make sure I understand the details before answering.

upvoted 0 times

...

Annmarie

6 months ago

Ah, the joys of wireless security. I'd just unplug the whole network and go back to carrier pigeons if I were them.

upvoted 0 times

...

Shawnee

6 months ago

B sounds like the right answer. A successful attack would require a weak passphrase and capturing the handshake.

upvoted 0 times

Stephen

5 months ago

Yes, that's correct. It's important to have a strong passphrase to prevent unauthorized access.

upvoted 0 times

...

Glory

5 months ago

I agree, B does seem like the correct answer. It would take a weak passphrase and capturing the handshake to successfully attack the network.

upvoted 0 times

...

Whitley

6 months ago

E is just ridiculous. WPA2-Personal is secure, it's not that easy to hijack the network.

upvoted 0 times

Princess

5 months ago

A) Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.

upvoted 0 times

...