CWNP CWSP-207 Exam - Topic 2 Question 35 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 35
Topic #: 2

In order to acquire credentials of a valid user on a public hot-spot network, what attacks may be conducted? Choose the single completely correct answer.

ASocial engineering and/or eavesdropping

BRF DoS and/or physical theft

CMAC denial of service and/or physical theft

DAuthentication cracking and/or RF DoS

ECode injection and/or XSS

Show Suggested Answer

Suggested Answer: A

by Sheridan at Nov 22, 2025, 08:15 PM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Andra

10 hours ago

Wait, are we sure about A? Seems too simple.

upvoted 0 times

...

Moon

6 days ago

C) MAC denial of service and/or physical theft? Sounds like a job for the IT Crowd.

upvoted 0 times

...

Emmanuel

11 days ago

B) RF DoS and/or physical theft? What is this, the 90s? We're in the 21st century, folks.

upvoted 0 times

...

Claudio

16 days ago

E) Code injection and/or XSS? Nah, that's so 2010. Get with the times, people.

upvoted 0 times

...

Daniel

21 days ago

D) Authentication cracking and/or RF DoS seems like the way to go. Brute force that login!

upvoted 0 times

...

James

26 days ago

A) Social engineering and/or eavesdropping is the correct answer. Gotta use the weakest link - the human!

upvoted 0 times

...

Shawnda

1 month ago

I recall that authentication cracking is a common method, but I’m not sure if it pairs well with RF DoS in this context.

upvoted 0 times

...

Talia

1 month ago

I’m a bit confused about the options. Isn’t physical theft more about stealing devices rather than acquiring credentials?

upvoted 0 times

...

Jolene

1 month ago

I think we practiced a question similar to this, and I feel like A might be the right choice.

upvoted 0 times

...

Carrol

2 months ago

I remember discussing social engineering in class, but I'm not sure if eavesdropping fits here.

upvoted 0 times

...

Krystina

2 months ago

This is a great question! I think I'll start by considering the different attack vectors that could be used, then narrow it down to the single most effective option.

upvoted 0 times

...

Rossana

2 months ago

I'm leaning towards D. Authentication cracking and RF DoS seem like the most comprehensive approach to acquiring user credentials on a public network.

upvoted 0 times

...

Ling

2 months ago

I think A is the best choice. Social engineering is common.

upvoted 0 times

...

Stephanie

2 months ago

Totally agree, A is the right choice!

upvoted 0 times

...

Glory

2 months ago

A) Social engineering and eavesdropping are classic methods.

upvoted 0 times

...

Major

3 months ago

True, but D highlights a specific attack method.

upvoted 0 times

...

Thea

3 months ago

I'm a bit confused by the wording of the question. Does "completely correct answer" mean I should only choose one option, or can I select multiple answers?

upvoted 0 times

...

William

3 months ago

Okay, I'm pretty sure the answer is A. Social engineering and eavesdropping seem like the most straightforward way to get valid user credentials on a public hotspot.

upvoted 0 times

...

Jolene

3 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the different types of attacks that could be used to acquire user credentials on a public network.

upvoted 0 times

...