CWNP Exam Questions

What are the appropriate sections of a WLAN security policy?

Given: ABC hospital wishes to create a strong security policy as a first step in securing there 802.11 WLAN
What are the appropriate sections of a WLAN security policy? (Choose 3)

A.
Attack classification

B.
Physical security of the RF medium

C.
Acceptable use of the network

D.
SSID broadcasting regulations

E.
End-user and administrator training

F.
Network audits

Explanation:
Risk assessment: What assets are at risk, to what threats, with what impact?For example, identify wireless laptops, PDA, and APs, data sent over wireless, and WLAN-facing wired network resources (firewalls, DHCP/DNS servers). What kinds of attacks do they face, and what would the impact be on your business should those resources be lost, damaged, or disclosed? Determining the most-likely and most-costly attacks will help you spend time and budget wisely.

Acceptable usage: What must users do to comply with this policy?For example, identify where users should obtain required WLAN security software and configuration assistance. Once security measures are installed, what best practices are users required to follow, and what behavior is precluded by this policy? User responsibilities should be clearly defined in simple terms.

Deployment process: How will this policy be implemented, tested, and taught?For example, describe a plan for staging a trial WLAN, verifying that the recommended measures actually
address identified risks, training WLAN administrators, and educating end users. Include a process for reviewing and refining your policy, both during initial testing and periodically thereafter.

http://searchmobilecomputing.techtarget.com/tip/Creating-a-wireless-security-policy