CWNP Exam CWSP-207 Topic 4 Question 19 Discussion

Actual exam question for CWNP's CWSP-207 exam

Question #: 19
Topic #: 4

Given: ABC Company is implementing a secure 802.11 WLAN at their headquarters (HQ) building in New York and at each of the 10 small, remote branch offices around the United States. 802.1X/EAP is ABC's preferred security solution, where possible. All access points (at the HQ building and all branch offices) connect to a single WLAN controller located at HQ. Each branch office has only a single AP and minimal IT resources.

What security best practices should be followed in this deployment scenario?

AAn encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.

BAPs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

CRADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.

DRemote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.

Show Suggested Answer

Suggested Answer: A

by Floyd at Nov 13, 2024, 11:23 PM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Denny

4 months ago

Haha, option D is a classic. Prohibiting remote management of the WLAN controller is a no-brainer! Who would even consider allowing that kind of access across the WAN link?

upvoted 0 times

Ruth

3 months ago

Absolutely, it's common sense to prohibit those protocols over the WAN.

upvoted 0 times

...

Jamal

3 months ago

It's a basic security practice to restrict management access like that.

upvoted 0 times

...

Bok

3 months ago

Definitely, allowing remote management over the WAN link is a huge risk.

upvoted 0 times

...

Sage

3 months ago

I agree, option D is a must for security.

upvoted 0 times

...

Tori

4 months ago

I also think option A is the most secure choice. It's important to prioritize security in a deployment scenario like this.

upvoted 0 times

...

Johna

4 months ago

I agree with Louisa. Using an encrypted VPN ensures that the communication is secure and protected from potential threats.

upvoted 0 times

...

Louisa

5 months ago

I think option A is the best practice for secure communication between the WLAN controller and remote APs.

upvoted 0 times

...

Britt

5 months ago

I disagree with Hoa. I believe option C is the way to go. Providing RADIUS services at the branch offices will ensure that sensitive authentication credentials are not sent over the internet, which is a major security risk.

upvoted 0 times

...

Hoa

5 months ago

I think option A is the best choice here. Implementing a secure VPN connection between the WLAN controller and each remote AP is crucial to protect the data transmitted over the WAN.

upvoted 0 times

Rosendo

4 months ago

D) Remote management of the WLAN controller via Telnet, SSH, HTTP, and HTTPS should be prohibited across the WAN link.

upvoted 0 times

...

Stephaine

4 months ago

C) RADIUS services should be provided at branch offices so that authentication server and supplicant credentials are not sent over the Internet.

upvoted 0 times

...

Deeanna

4 months ago

B) APs at HQ and at each branch office should not broadcast the same SSID; instead each branch should have a unique ID for user accounting purposes.

upvoted 0 times

...

Carman

4 months ago

A) An encrypted VPN should connect the WLAN controller and each remote controller-based AP, or each remote site should provide an encrypted VPN tunnel to HQ.

upvoted 0 times

...