MENU
Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States. 802.1X/EAP is ABC's preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources.
What security best practices should be followed in this deployment scenario?
Suggested Answer: A
Get Premium CWSP-208 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
25 comments · newest first
RA
Rachael
10 months ago
Definitely agree on prohibiting remote management over WAN!
LE
Lelia
10 months ago
RADIUS at branches? That's a bit overkill, right?
CH
Chaya
10 months ago
Wait, are they really using Telnet? That's so outdated!
SA
Sage
11 months ago
I disagree, unique SSIDs could confuse users.
CL
Clay
11 months ago
A VPN for the APs sounds like a solid plan!
DO
Doug
11 months ago
I definitely recall that remote management should be secure, so option D makes sense, but I’m not clear on the implications of prohibiting all those protocols.
MI
Michell
11 months ago
Option C seems important since it mentions RADIUS at branch offices, but I’m a bit confused about how that would work with limited IT resources.
GA
Gabriele
11 months ago
I think having unique SSIDs for each branch, as mentioned in option B, could help with user tracking, but I wonder if it complicates things too much for users.
WI
Winfred
12 months ago
I remember studying about VPNs for secure connections, so option A sounds like a good practice, but I'm not entirely sure if it's necessary for every remote AP.
FR
Francisca
12 months ago
This question seems pretty straightforward to me. The answer is clearly C - using RADIUS services at the branch offices. That way, the authentication credentials don't have to traverse the internet, which is the most secure approach. I'm confident that's the right solution here.
KA
Kayleigh
12 months ago
Okay, I think I've got a handle on this. The key is to ensure the remote connections to the central controller are secure, since that's the potential vulnerability. I'd go with option A - an encrypted VPN between the remote APs and the controller. That way, the authentication traffic stays protected.
CA
Cassi
1 year ago
Hmm, this is a tricky one. I'm a little unsure about the best approach here. Should I be looking at VPNs, unique SSIDs, or RADIUS services? There are a few options presented, and I'll need to carefully consider the pros and cons of each.
SE
Sena
1 year ago
This seems like a pretty straightforward security question. I'd focus on the key details - the remote branch offices, the single WLAN controller, and the preference for 802.1X/EAP. Looks like I need to think about how to secure the connections between the remote sites and the central controller.
CA
Caprice
1 year ago
I think we should also consider option D to restrict remote management access for better security.
ME
Melissia
1 year ago
Haha, I wonder if they'll let me use the company VPN to stream some Netflix at home. Gotta test those security measures, right?
HA
Harrison
1 year ago
I agree, the VPN tunnel is critical to protect the data in transit. Definitely the best choice here.
RE
Reita
1 year ago
C) RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.
MA
Marge
1 year ago
B) APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.
PE
Peggy
1 year ago
A) An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.
TE
Terrilyn
1 year ago
I believe option C is also important to ensure secure authentication without sending credentials over the Internet.
AL
Alaine
1 year ago
Option A is the way to go. Encrypted VPNs are essential for securing the remote branch offices.
RO
Rodrigo
1 year ago
B) APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.
DE
Delisa
1 year ago
A) An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.
DO
Dolores
1 year ago
I agree with Karan, using an encrypted VPN ensures data confidentiality and integrity.
KA
Karan
1 year ago
I think option A is the best practice for secure communication between the WLAN controller and remote APs.