nerdexam
GIAC

GSLC · Question #398

You work as an Administrator for Bluesky Inc. The company has 145 Windows XP Professional client computers and eighty Windows 2003 Server computers. You want to install a security layer of WAP specifi

The correct answer is A. Wireless Transport Layer Security (WTLS). Wireless Transport Layer Security (WTLS) is the dedicated security sublayer of the WAP stack, designed specifically to provide privacy, data integrity, and mutual authentication for wireless client-server communications.

Security Architecture & Engineering

Question

You work as an Administrator for Bluesky Inc. The company has 145 Windows XP Professional client computers and eighty Windows 2003 Server computers. You want to install a security layer of WAP specifically designed for a wireless environment. You also want to ensure that the security layer provides privacy, data integrity, and authentication for client-server communications over a wireless network. Moreover, you want a client and server to be authenticated so that wireless transactions remain secure and the connection is encrypted. Which of the following options will you use to accomplish the task?

Options

  • AWireless Transport Layer Security (WTLS)
  • BRecovery Console
  • CWired Equivalent Privacy (WEP)
  • DVirtual Private Network (VPN)

How the community answered

(25 responses)
  • A
    88% (22)
  • B
    8% (2)
  • D
    4% (1)

Why each option

Wireless Transport Layer Security (WTLS) is the dedicated security sublayer of the WAP stack, designed specifically to provide privacy, data integrity, and mutual authentication for wireless client-server communications.

AWireless Transport Layer Security (WTLS)Correct

WTLS is built into the WAP architecture as its native security layer, providing certificate-based mutual authentication, data integrity via message authentication codes, and symmetric encryption for wireless sessions - precisely satisfying all stated requirements for a WAP-specific security solution.

BRecovery Console

Recovery Console is a Windows diagnostic and repair tool used to recover from system failures; it is not a network security or encryption protocol of any kind.

CWired Equivalent Privacy (WEP)

Wired Equivalent Privacy (WEP) provides basic wireless link-layer encryption but lacks strong mutual authentication and has well-documented cryptographic weaknesses that make it insufficient for the stated requirements.

DVirtual Private Network (VPN)

A VPN creates an encrypted tunnel over a network but is not a WAP-specific security layer and does not provide the wireless protocol-level authentication and integrity described in the question.

Concept tested: WAP Wireless Transport Layer Security (WTLS) protocol

Source: https://www.w3.org/TR/2000/NOTE-WTLS-20001109/

Topics

#WTLS#wireless security#WAP security#client-server authentication

Community Discussion

No community discussion yet for this question.

Full GSLC Practice