Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CWNP CWSP-208 Exam - Topic 2 Question 23 Discussion

What WLAN client device behavior is exploited by an attacker during a hijacking attack?
A) When the RF signal between a client and an access point is disrupted for more than a few seconds, the client device will attempt to associate to an access point with better signal quality.
B) When the RF signal between a client and an access point is lost, the client will not seek to reassociate with another access point until the 120 second hold down timer has expired.
C) After the initial association and 4-way handshake, client stations and access points do not need to perform another 4-way handshake, even if connectivity is lost.
D) As specified by the Wi-Fi Alliance, clients using Open System authentication must allow direct client-to-client connections, even in an infrastructure BSS.
E) Client drivers scan for and connect to access points in the 2.4 GHz band before scanning the 5 GHz band.

CWNP CWSP-208 Exam - Topic 2 Question 23 Discussion

Actual exam question for CWNP's CWSP-208 exam
Question #: 23
Topic #: 2
[All CWSP-208 Questions]

What WLAN client device behavior is exploited by an attacker during a hijacking attack?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Dominga at Aug 17, 2026, 12:16 PM

Limited Time Offer

25%

Off

Get Premium CWSP-208 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Reita
3 days ago
E) is a common behavior, but why prioritize 2.4 GHz over 5 GHz? Seems odd!
upvoted 0 times
...
Aileen
8 days ago
D) is wild! I didn't know open systems allowed direct connections like that.
upvoted 0 times
...
Terrilyn
13 days ago
C) is interesting, but I thought they had to re-authenticate every time?
upvoted 0 times
...
Meghan
19 days ago
I disagree, B) makes more sense. That hold down timer is crucial.
upvoted 0 times
...
Gennie
24 days ago
A) is definitely the right choice. Clients chase better signals!
upvoted 0 times
...
Ruby
29 days ago
D seems off to me; I don't think Open System authentication directly relates to hijacking attacks. I might lean towards A or B instead.
upvoted 0 times
...
Graciela
1 month ago
I feel like C could be a trick option. I recall practicing a question where the 4-way handshake was crucial for security, but I can't remember the specifics.
upvoted 0 times
...
Jerilyn
1 month ago
I'm not entirely sure, but I remember something about a hold down timer in B. It seems like it could be relevant to how clients behave during a hijacking.
upvoted 0 times
...
Benedict
1 month ago
I think the answer might be A, since I've read that clients will try to connect to a stronger signal if they lose connection.
upvoted 0 times
...

Save Cancel