CompTIA Securtiy+ Set12 A_3_4_Secure_Wireless_Access

0364
A wireless network has the following design requirements:
- Authentication must not be dependent on enterprise directory service
- It must allow background reconnection for mobile users
- It must not depend on user certificates

Which of the following should be used in the design to meet the requirements? (Choose two.)

 (The term “background reconnection” does not exist in any WiFi documentation; PEAP does
support “fast reconnect” while roaming - it is a bit unclear what CompTIA means here)

0420
A security engineer is configuring a wireless network with EAP-TLS. Which of the following activities is a requirement for this configuration?

0461
A systems administrator wants to implement a wireless protocol that will allow the organization to authenticate
mobile devices prior to providing the user with a captive portal Iogin.

Which of the following should the systems administrator configure?

0501
A security analyst is hardening a WiFi infrastructure.
The primary requirements are the following:
- The infrastructure must allow staff to authenticate using the most secure method.
- The infrastructure must allow guests to use an "open" WiFi network that logs valid
email addresses before granting access to the Internet.

Given these requirements, which of the following statements BEST represents what the analyst should recommend and configure?

0545
An instructor is teaching a hands-on wireless security class and needs to configure a test access point to show students an attack on a weak protocol.

Which of the following configurations should the instructor implement?

0546
A security analyst is hardening a large-scale wireless network. The primary requirements are the following:
- Must use authentication through EAP-TLS certificates
- Must use an AAA server
- Must use the most secure encryption protocol

Given these requirements, which of the following should the analyst implement and recommend? (Select TWO.)

0589
A security administrator is performing a risk assessment on a legacy WAP with a WEP-enabled wireless infrastructure.

Which of the following should be implemented to harden the infrastructure without upgrading the
WAP?

0620
A company needs to implement a system that only lets a visitor use the company's network infrastructure if the visitor accepts the AUP.

Which of the following should the company use?

0636
A security analyst is specifying requirements for a wireless network. The analyst must explain the security features Key rotationprovided by various architecture choices.

Which of the following is provided by PEAP, EAP-TLS, and EAP-TTLS?

0653
A company wants to implement a wireless network with the following requirements:
- All wireless users will have a unique credential.
- User certificates will not be required for authentication.
- The company's AAA infrastructure must be utilized.
- Local hosts should not store authentication tokens.

Which of the following should be used in the design to meet the requirements?

0656
A security administrator is configuring a RADIUS server for wireless authentication. The configuration must ensure client credentials are encrypted end-to-end between the client and the authenticator.

Which of the following protocols should be configured on the RADIUS server? (Choose two.)

0671
A company utilizes 802.11 for all client connectivity within a facility. Users in one part of the building are reporting they are unable to access company resources when connected to the company SSID.

Which of the following should the security administrator use to assess connectivity?

0712
A systems administrator needs to integrate multiple IoT and small embedded devices into the company's wireless
network securely. Which of the following should the administrator implement to ensure low-power and legacy
devices can connect to the wireless network?

0806
An organization wants to set up a wireless network in the most secure way. Budget is not a major consideration, and the organization is willing to accept some complexity when clients are connecting. It is also willing to deny Enable WPA2-PSK for older clients and WPA2-Enterprise for all other clients.wireless connectivity for clients who cannot be connected in the most secure manner.

Which of the following would be the MOST secure setup that conforms to the organization's requirements?

0821
A systems engineer is setting up a RADIUS server to support a wireless network that uses certificate authentication.

Which of the following protocols must be supported by both the RADIUS server and the WAPs?

0823
A systems engineer is configuring a wireless network. The network must not require installation of third-party software. Mutual authentication of the client and the server must be used. The company has an internal PKI.

Which of the following configurations should the engineer choose?

0868
Which of the following attacks is used to capture the WPA2 handshake?

0885
A local coffee shop runs a small WiFi hotspot for its customers that utilizes WPA2-PSK. The coffee shop would like WEPto stay current with security trends and wants to implement WPA3 to make its WiFi even more secure.

Which of the following technologies should the coffee shop use in place of PSK?

0913
A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate devices using PKI.

Which of the following should the administrator configure?

0961
A coffee company has hired an IT consultant to set up a WiFi network that will provide Internet access to customers who visit the company's chain of cafés. The coffee company has provided no requirements other than that customers should be granted access after registering via a web form and accepting the terms of service.

Which of the following is the MINIMUM acceptable configuration to meet this single requirement?