CWNP CWSP-207 Exam - Topic 2 Question 35 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 35
Topic #: 2

In order to acquire credentials of a valid user on a public hot-spot network, what attacks may be conducted? Choose the single completely correct answer.

ASocial engineering and/or eavesdropping

BRF DoS and/or physical theft

CMAC denial of service and/or physical theft

DAuthentication cracking and/or RF DoS

ECode injection and/or XSS

Show Suggested Answer

Suggested Answer: A

by Sheridan at Nov 22, 2025, 08:15 PM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pansy

1 day ago

I feel like A is more comprehensive for public networks.

upvoted 0 times

...

Fausto

6 days ago

But A covers both social tactics and technical risks.

upvoted 0 times

...

Weldon

12 days ago

I’m leaning towards D. Authentication cracking is serious.

upvoted 0 times

...

Antione

17 days ago

Agreed! Eavesdropping is a real threat too.

upvoted 0 times

...

Alpha

22 days ago

D sounds plausible too, but A is definitely the most common.

upvoted 0 times

...

Stephaine

27 days ago

B and C are more about disruption, not credential theft.

upvoted 0 times

...

Andra

2 months ago

Wait, are we sure about A? Seems too simple.

upvoted 0 times

...

Moon

2 months ago

C) MAC denial of service and/or physical theft? Sounds like a job for the IT Crowd.

upvoted 0 times

...

Emmanuel

2 months ago

B) RF DoS and/or physical theft? What is this, the 90s? We're in the 21st century, folks.

upvoted 0 times

...

Claudio

2 months ago

E) Code injection and/or XSS? Nah, that's so 2010. Get with the times, people.

upvoted 0 times

...

Daniel

2 months ago

D) Authentication cracking and/or RF DoS seems like the way to go. Brute force that login!

upvoted 0 times

...

James

2 months ago

A) Social engineering and/or eavesdropping is the correct answer. Gotta use the weakest link - the human!

upvoted 0 times

...

Shawnda

3 months ago

I recall that authentication cracking is a common method, but I’m not sure if it pairs well with RF DoS in this context.

upvoted 0 times

...

Talia

3 months ago

I’m a bit confused about the options. Isn’t physical theft more about stealing devices rather than acquiring credentials?

upvoted 0 times

...

Jolene

3 months ago

I think we practiced a question similar to this, and I feel like A might be the right choice.

upvoted 0 times

...

Carrol

3 months ago

I remember discussing social engineering in class, but I'm not sure if eavesdropping fits here.

upvoted 0 times

...

Krystina

3 months ago

This is a great question! I think I'll start by considering the different attack vectors that could be used, then narrow it down to the single most effective option.

upvoted 0 times

...

Rossana

3 months ago

I'm leaning towards D. Authentication cracking and RF DoS seem like the most comprehensive approach to acquiring user credentials on a public network.

upvoted 0 times

...

Ling

4 months ago

I think A is the best choice. Social engineering is common.

upvoted 0 times

...

Stephanie

4 months ago

Totally agree, A is the right choice!

upvoted 0 times

...

Glory

4 months ago

A) Social engineering and eavesdropping are classic methods.

upvoted 0 times

...

Major

4 months ago

True, but D highlights a specific attack method.

upvoted 0 times

...

Thea

4 months ago

I'm a bit confused by the wording of the question. Does "completely correct answer" mean I should only choose one option, or can I select multiple answers?

upvoted 0 times

...

William

5 months ago

Okay, I'm pretty sure the answer is A. Social engineering and eavesdropping seem like the most straightforward way to get valid user credentials on a public hotspot.

upvoted 0 times

...

Jolene

5 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the different types of attacks that could be used to acquire user credentials on a public network.

upvoted 0 times

...