CWNP CWSP-207 Exam - Topic 4 Question 24 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 24
Topic #: 4

Given: You support a coffee shop and have recently installed a free 802.11ac wireless hot-spot for the benefit of your customers. You want to minimize legal risk in the event that the hot-spot is used for illegal Internet activity.

What option specifies the best approach to minimize legal risk at this public hot-spot while maintaining an open venue for customer Internet access?

AConfigure WPA2-Enterprise security on the access point

BBlock TCP port 25 and 80 outbound on the Internet router

CRequire client STAs to have updated firewall and antivirus software

DAllow only trusted patrons to use the WLAN

EUse a WIPS to monitor all traffic and deauthenticate malicious stations

FImplement a captive portal with an acceptable use disclaimer

Show Suggested Answer

Suggested Answer: C

by Joaquin at Mar 07, 2025, 10:48 PM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fletcher

2 months ago

I agree with F, at least it sets clear rules for everyone.

upvoted 0 times

...

Paola

3 months ago

WPA2-Enterprise sounds complicated for a coffee shop, though.

upvoted 0 times

...

Odelia

3 months ago

Wait, can you really block illegal activity just with a disclaimer?

upvoted 0 times

...

Kenny

3 months ago

Not sure about that, D seems more secure.

upvoted 0 times

...

Ahmad

3 months ago

I think option F is the best way to go!

upvoted 0 times

...

Merrilee

4 months ago

Allowing only trusted patrons seems too restrictive for a coffee shop. I feel like the captive portal option is more balanced.

upvoted 0 times

...

Jennie

4 months ago

I think requiring updated firewall and antivirus software is a bit unrealistic for a public hot-spot. Most customers won't have that.

upvoted 0 times

...

Thaddeus

4 months ago

I'm not sure if blocking TCP ports is enough to minimize legal risk. It feels like it might just be a temporary fix.

upvoted 0 times

...

Arlette

4 months ago

I remember discussing the importance of a captive portal in class. It seems like a good way to inform users about acceptable use.

upvoted 0 times

...

Desirae

4 months ago

Using a WIPS to monitor traffic and kick off malicious users could work, but that might be a bit heavy-handed. I'll need to weigh the pros and cons carefully.

upvoted 0 times

...

Avery

5 months ago

Configuring WPA2-Enterprise seems like overkill for a public hotspot. We want to make it easy for customers to connect, not add extra hoops to jump through.

upvoted 0 times

...

Mozelle

5 months ago

Okay, I think the captive portal with an acceptable use disclaimer is the way to go here. That lets us set clear expectations for users while still keeping the hotspot open.

upvoted 0 times

...

Fredric

5 months ago

Hmm, I'm not sure about this one. Blocking ports and requiring updated software could help, but might be too restrictive for a public hotspot. I'll need to review the options closely.

upvoted 0 times

...

Sonia

5 months ago

This seems like a tricky one. I'll need to think carefully about the legal risks and how to balance that with providing open access for customers.

upvoted 0 times

...

Sylvie

5 months ago

Implementing a captive portal with an acceptable use disclaimer sounds like a good compromise. That way customers can still access the internet, but there's a clear policy in place.

upvoted 0 times

...

Shawna

5 months ago

Configuring WPA2-Enterprise security seems like it could work, but that might be too restrictive for a public hotspot. I'll need to weigh the pros and cons of each option.

upvoted 0 times

...

Mozell

5 months ago

Okay, I think I've got a handle on this. The key is finding the right approach to minimize legal liability without overly restricting customer access.

upvoted 0 times

...

Paola

5 months ago

Hmm, I'm a bit unsure about this one. I'll need to review the options and see which one best addresses the legal risk while still maintaining an open venue.

upvoted 0 times

...

Barbra

5 months ago

This seems like a tricky one. I'll need to think carefully about the legal risks and how to balance that with providing open access for customers.

upvoted 0 times

...

Lino

10 months ago

Requiring trusted patrons only? What is this, a members-only club? Nah, the captive portal is the way to go. Keeps it open but covers your butt.

upvoted 0 times

Rosio

9 months ago

E) Use a WIPS to monitor all traffic and deauthenticate malicious stations

upvoted 0 times

...

Mitzie

9 months ago

F) Implement a captive portal with an acceptable use disclaimer

upvoted 0 times

...

France

9 months ago

A) Configure WPA2-Enterprise security on the access point

upvoted 0 times

...

Ligia

10 months ago

E sounds interesting, but a WIPS might be overkill for a small coffee shop. Keep it simple with the captive portal, I say.

upvoted 0 times

...

Xuan

10 months ago

Haha, blocking ports 25 and 80? That's like trying to stop people from drinking coffee by taking away the cups! Option F is clearly the way to go.

upvoted 0 times

Margot

9 months ago

User 3: Plus, it helps protect the coffee shop from any legal issues that may arise.

upvoted 0 times

...

Ettie

9 months ago

User 2: Definitely, it sets clear expectations for customers using the hot-spot.

upvoted 0 times

...

Scarlet

9 months ago

User 1: I agree, a captive portal with an acceptable use disclaimer is the best approach.

upvoted 0 times

...

Chantay

10 months ago

Option C seems a bit too restrictive. Requiring updated software on all clients could be a hassle for customers and limit accessibility. I'd go with the captive portal route.

upvoted 0 times

Howard

8 months ago

Definitely, it sets clear expectations for users while still providing open access.

upvoted 0 times

...

Erick

8 months ago

Agreed, it's a good balance between security and accessibility.

upvoted 0 times

...

Scot

9 months ago

Captive portal with a disclaimer sounds like the best option.

upvoted 0 times

...

Estrella

9 months ago

F) Implement a captive portal with an acceptable use disclaimer

upvoted 0 times

...

Ernest

9 months ago

E) Use a WIPS to monitor all traffic and deauthenticate malicious stations

upvoted 0 times

...

Aleta

9 months ago

D) Allow only trusted patrons to use the WLAN

upvoted 0 times

...

Cassandra

9 months ago

C) Require client STAs to have updated firewall and antivirus software

upvoted 0 times

...

Caprice

10 months ago

B) Block TCP port 25 and 80 outbound on the Internet router

upvoted 0 times

...

Madonna

10 months ago

A) Configure WPA2-Enterprise security on the access point

upvoted 0 times

...

Mike

10 months ago

I think option F is the best approach. A captive portal with an acceptable use disclaimer will help cover the coffee shop's legal liability while still providing open internet access for customers.

upvoted 0 times

...