CWNP CWSP-208 Dumps Questions Answers

Different EAP types involve varying numbers of exchanges:

EAP-TLS, for example, involves more exchanges due to certificate negotiation.

EAP-MD5 or PEAP might involve fewer steps.

Thus, the most likely reason for different frame counts during successful authentication is the use of different EAP types.

Incorrect:

A. Cipher suites are negotiated after EAP, not during it.

B. Retransmissions would typically cause noticeable delay and not result in exactly 11 frames.

C. Reassociation does not significantly reduce EAP frame count.

D. RSN/TSN differences are not directly related to EAP exchange length.

EAP-FAST (Flexible Authentication via Secure Tunneling) provides:

Mutual authentication using Protected Access Credentials (PACs).

Does not require X.509 certificates for either client or server (although optional for servers).

Is faster and easier to deploy in environments lacking a PKI.

Incorrect:

B. EAP-MD5 provides no mutual authentication.

C. EAP-TLS requires client and server certificates.

D. PEAPv0/EAP-MSCHAPv2 requires a server certificate.

E. EAP-TTLS requires a server certificate.

F. PEAPv1/EAP-GTC still requires a server certificate.

RADIUS supports dynamic policy assignment via return list attributes (e.g., Tunnel-Private-Group-ID, Class).

The WLAN controller reads this group attribute and applies the corresponding security profile (e.g., VLAN, QoS).

Incorrect:

A. The controller does not poll the RADIUS server.

C. LDAP may support group info, but RADIUS mediates it for WLAN usage.

D. Group attributes are not sent during the 4-Way Handshake—it occurs after EAP success.