Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by CWNP
Exam Format
90 min
70% (84% for instructors)
Professional
Registration
$349.99 USD
Prometric or online proctoring
English
Validity
3 years
Pass the current CWSP exam; Hold a valid CWNA and pass CWSP to renew both for 3 years; Achieve CWNE certification (renews all CWNP certifications)
CWSP-207 Exam Topics and Domains
CWSP-207 is organized into 4 weighted domains. Expect to work with IPSec, Wireshark, 802.1X port security, Aircrack-ng, and more.
1
Security Policy
10%
Define WLAN security Requirements
Business and technical policy evaluationStakeholder involvementDevice and application review
- Evaluate and incorporate business, technical, and applicable regulatory policies
- Involve appropriate stakeholders
- Review client devices and applications
- Review WLAN infrastructure devices
Develop WLAN security policies
Policy translation and writingPolicy lifecycle management
- Translate security requirements to high-level policy statements
- Write policies conforming to common practices
- Ensure appropriate approval and support for all policies
- Implement security policy lifecycle management
Security awareness training
Training administration
Ensure proper training is administered for all stakeholders related to security policies and ongoing security awareness
2
Vulnerabilities, Threats, and Attacks
30%
Identify and mitigate vulnerabilities and threats
Vulnerability identificationMitigation strategiesCommon WLAN attacksLog and traffic analysis
- Use information sources to identify the latest vulnerabilities
- Determine the risk and impact of identified vulnerabilities
- Select appropriate actions to mitigate threats
- Review and adjust device configurations
- Implement appropriate code modifications, patches and upgrades
- Quarantine unrepaired/compromised systems
- Examine logs and network traffic
- Describe and detect possible common WLAN attacks
Penetration testing
Penetration testing proceduresPenetration testing tools
- Implement penetration testing procedures to identify weaknesses
- Use appropriate penetration testing processes
- Select and use penetration testing tools
Network monitoring
Monitoring implementationWIDS/WIPS solutions
- Implement network monitoring to identify attacks and vulnerabilities
- Use appropriate tools for network monitoring
- Implement mobile, integrated and overlay WIDS/WIPS solutions
Risk analysis and mitigation
Risk management procedures
- Describe and perform risk analysis procedures
- Asset management
- Risk Ratings
- Loss expectancy calculations
- Develop risk management plans for WLANs
3
WLAN Security Design and Architecture
50%
Authentication solutions
WPA/WPA2 authenticationWPA3 authenticationAdvanced authentication methodsEAP methodsGuest access
- Select and implement appropriate authentication solutions
- Understand the capabilities of EAP methods
- Configure guest access authentication
Encryption solutions
Encryption methodsDeprecated solutionsModern encryptionVPN solutions
- Select and implement appropriate encryption solutions
- Understand deprecated solutions and migration paths
- Implement CCMP/AES and modern encryption
- Deploy VPN solutions for additional security
Wireless monitoring solutions
WIPS implementationProtocol and spectrum analysis
- Select and implement wireless monitoring solutions
- Deploy WIPS systems
- Use protocol and spectrum analyzers
802.11 Authentication and Key Management
Key hierarchiesHandshakes and exchangesSecurity frameworks
- Understand and explain 802.11 AKM components and processes
- Understand encryption keys and key hierarchies
- Understand handshakes and exchanges
- Understand security framework evolution
Wired security configurations
Network infrastructure securityNetwork controls
- Implement appropriate wired security configurations
- Configure physical port security
- Implement network segmentation and VLANs
- Configure tunneling protocols and firewalls
Authentication and security services
Identity and access managementDevice management
- Implement authentication and security services
- Deploy Role-Based Access Control
- Implement PKI and certificate services
- Configure NAC and MDM solutions
Secure roaming solutions
Fast roaming methods
- Implement secure transitioning (roaming) solutions
- Configure 802.11r Fast BSS Transition
- Implement Opportunistic Key Caching
Public and open network security
Public access security
- Secure public access and open networks
- Implement captive portals
- Deploy Hotspot 2.0/Passpoint
- Configure OWE for open networks
Infrastructure security
Common vulnerabilities
- Implement preventative measures for common vulnerabilities
- Avoid weak security solutions
- Harden infrastructure devices
4
Security Lifecycle Management
10%
Security lifecycle implementation
Lifecycle phasesTechnology management
- Understand and implement management within the security lifecycle
- Identify technologies being introduced to the WLAN
- Assess security requirements for new technologies
- Implement appropriate protective measures
- Monitor and audit for security compliance
Change management
Change procedures
- Use effective change management procedures
- Document changes properly
- Obtain appropriate approvals
- Implement notification procedures
Capacity planning and forecasting
Load observation
- Use information from monitoring solutions for load observation
- Forecast future requirements
- Ensure compliance with security policy
Maintenance procedures
System maintenance
- Implement appropriate maintenance procedures
- Manage licenses effectively
- Perform software/code upgrades
- Maintain configuration management
Security auditing
Audit proceduresReporting
- Implement effective auditing procedures
- Perform various audit types
- Analyze audit results
- Generate comprehensive reports
- Report findings to appropriate stakeholders
How do I earn this certification?
Passing CWSP-207 earns the CWSP - Certified Wireless Security Professional certification. It sits in the Wireless Security track.
Current Level Exams
- CWAP-404 - Certified Wireless Analysis Professional
- CWDP-304 - Certified Wireless Design Professional
- CWISA-102 - Certified Wireless IoT Solutions Administrator
Next Level Options
CWNE - Certified Wireless Network Expert
Alternative Paths
- CWAP-404 - Certified Wireless Analysis Professional Complementary protocol analysis skills
- CWDP-304 - Certified Wireless Design ProfessionalNetwork design and architecture skills
- CWTS-101 - Certified Wireless Technology Specialist Foundation certification for team members
- CWS-101 - Certified Wireless Specialist Business-focused wireless knowledge
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for CWSP-207 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2023-01-01
- Announcement date: 2024-08-01
Updates
- WPA3 Latest Core topic in CWSP-207, expanded coverage expected in CWSP-208 • Release date: 2018 (ongoing updates)
- Wi-Fi 6E 802.11ax with 6 GHz Covered in CWSP-207, security considerations for 6 GHz band • Release date: 2021
- Enhanced Open (OWE) RFC 8110 Important topic for open network security in CWSP-207 • Release date: 2017
- FILS (Fast Initial Link Setup) 802.11ai Covered for fast secure roaming scenarios • Release date: 2016
Who should take this exam?
This exam is typically taken by Wireless Network Security Engineers and Network Security Architects.
CWNA - Certified Wireless Network Administrator (current and valid)
- 2-3 years of experience with enterprise wireless networks
- Experience with 802.11 security protocols
- Knowledge of authentication and encryption methods
- Understanding of wireless vulnerabilities and threats