CWNP CWSP-207 Exam - Topic 2 Question 39 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 39
Topic #: 2

Given: In XYZ's small business, two autonomous 802.11ac APs and 12 client devices are in use with WPA2-Personal.

What statement about the WLAN security of this company is true?

AIntruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt the data traffic of other users.

BA successful attack against all unicast traffic on the network would require a weak passphrase dictionary attack and the capture of the latest 4-Way Handshake for each client.

CAn unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt multicast or broadcast traffic.

DAn unauthorized WLAN user with a protocol analyzer can decode data frames of authorized users if he captures the BSSID, client MAC address, and a user's 4-Way Handshake.

EBecause WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.

Show Suggested Answer

Suggested Answer: B

by Kallie at Apr 13, 2026, 01:42 AM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arthur

2 days ago

I think option B sounds familiar from practice questions. It mentioned needing the 4-Way Handshake, which is crucial for attacks on unicast traffic.

upvoted 0 times

...

Dominga

7 days ago

I remember studying that WPA2-Personal can be vulnerable to dictionary attacks, but I'm not sure if that means intruders can decrypt all traffic.

upvoted 0 times

...