CWNP CWSP-207 Exam - Topic 3 Question 17 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 17
Topic #: 3

Given: Your company has just completed installation of an IEEE 802.11 WLAN controller with 20 controller-based APs. The CSO has specified PEAPv0/EAP-MSCHAPv2 as the only authorized WLAN authentication mechanism. Since an LDAP-compliant user database was already in use, a RADIUS server was installed and is querying authentication requests to the LDAP server.

Where must the X.509 server certificate and private key be installed in this network?

ASupplicant devices

BLDAP server

CController-based APs

DWLAN controller

ERADIUS server

Show Suggested Answer

Suggested Answer: E

by Fidelia at Sep 13, 2024, 09:28 AM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tandra

7 months ago

I thought it could be on the APs too, but I guess not?

upvoted 0 times

...

Carli

8 months ago

Definitely RADIUS server, that’s standard practice.

upvoted 0 times

...

Jolene

8 months ago

Wait, are we sure it’s not the WLAN controller?

upvoted 0 times

...

Macy

8 months ago

Totally agree, it’s essential for PEAP!

upvoted 0 times

...

Eileen

8 months ago

The X.509 certificate goes on the RADIUS server.

upvoted 0 times

...

Oliva

9 months ago

I feel like the supplicant devices might need the certificate too, but it seems more likely that the RADIUS server is the right answer.

upvoted 0 times

...

Tarra

9 months ago

I practiced a similar question where the certificate was installed on the APs, but that was a different setup.

upvoted 0 times

...

Junita

9 months ago

I remember something about needing the certificate on the WLAN controller for secure communication, but I can't recall the specifics.

upvoted 0 times

...

Mickie

9 months ago

I think the X.509 certificate should go on the RADIUS server since it handles the authentication requests, but I'm not entirely sure.

upvoted 0 times

...

Glory

9 months ago

I'm leaning towards option E, the RADIUS server. Since the RADIUS server is the one communicating with the LDAP server to authenticate users, that's where the certificate and key need to be installed.

upvoted 0 times

...

Remona

9 months ago

I'm pretty sure the answer is the RADIUS server. The question states that the RADIUS server is querying the LDAP server for authentication, so the certificate and key need to be on the RADIUS server to establish the secure connection.

upvoted 0 times

...

Reynalda

9 months ago

Okay, let me think this through. The WLAN controller is managing the APs, but the authentication is being handled by the RADIUS server. So the certificate and key should be installed on the RADIUS server, which is the central point of authentication.

upvoted 0 times

...

Jannette

9 months ago

I'm a bit confused here. Is the LDAP server also involved in the authentication process? If so, would the certificate need to be installed there as well?

upvoted 0 times

...

Stefany

9 months ago

Hmm, this seems straightforward. The X.509 certificate and private key need to be installed on the RADIUS server since it's the one handling the authentication requests.

upvoted 0 times

...

Verdell

9 months ago

Okay, I think I've got this. Since the employee is based in Germany, an EU country, the GDPR would apply to the fraud examiner's investigation, even though the examiner is located in a non-EU country. The key is the location of the employee, not the investigator.

upvoted 0 times

...

Jessenia

2 years ago

Actually, I believe the X.509 server certificate and private key should be installed on the WLAN controller. It's responsible for managing the APs and ensuring secure communication.

upvoted 0 times

...

Octavio

2 years ago

I agree with William. The RADIUS server is handling the authentication requests, so it makes sense to install the certificate and key there.

upvoted 0 times

...

Avery

2 years ago

Easy peasy, the X.509 certificate and key go on the RADIUS server (option E). That's where the authentication traffic flows, and the certificate needs to be there to secure it.

upvoted 0 times

...

William

2 years ago

I think the X.509 server certificate and private key should be installed on the RADIUS server.

upvoted 0 times

...

Nydia

2 years ago

I'm going with option D, the WLAN controller. It's the central hub, so that's where the certificate should be, right? Although, the RADIUS server also makes sense.

upvoted 0 times

Alline

2 years ago

True, both the WLAN controller and RADIUS server could be valid choices. It's important to ensure the certificate is in the right place for secure authentication.

upvoted 0 times

...

Chantell

2 years ago

I think the RADIUS server is also a valid option. It's responsible for querying authentication requests to the LDAP server.

upvoted 0 times

...

Audra

2 years ago

Option D, the WLAN controller is correct. That's where the X.509 server certificate and private key should be installed.

upvoted 0 times

...

Venita

2 years ago

Definitely the RADIUS server (option E). That's where the authentication magic happens, and the certificate needs to be there to secure the process.

upvoted 0 times

...

Darrin

2 years ago

Haha, I bet the CSO is scratching their head trying to figure out where to put that certificate. It's like a game of hide and seek!

upvoted 0 times

...

Avery

2 years ago

The X.509 server certificate and private key must be installed on the RADIUS server (option E). That's where the authentication mechanism is implemented.

upvoted 0 times