CWNP CWNA-109 Certified Wireless Network Administrator Exam Practice Test

PoE has different standards that define different power levels for PSEs and PDs. The original standard, IEEE 802.3af, defines two classes of PSEs: Class 3 (15.4 W) and Class 4 (30 W). The newer standard, IEEE 802.3at, also known as PoE+, defines four classes of PSEs: Class 0 (15.4 W), Class 1 (4 W), Class 2 (7 W), and Class 3 (12.95 W). The power level received at the PD is always lower than the power level provided by the PSE, due to cable resistance and power dissipation. The IEEE standards specify the minimum power level that must be received at the PD for each class of PSE. For a Class 4 PSE, the minimum power level received at the PD is 25.5 W910. References: CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 295; CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 289.

CCI is still a possibility in this network because the client devices connected to one of the channel 1 APs will transmit frames that reach the other channel 1 AP as well as clients connected to the other channel 1 AP. CCI stands for co-channel interference, which is a type of interference that occurs when two or more devices transmit on the same channel within range of each other. CCI reduces performance and capacity because it causes contention and collisions on the wireless medium, which leads to retransmissions and delays. CCI can be mitigated by increasing physical separation between devices using the same channel or by reducing transmit power levels to limit coverage area. In this scenario, three access points are used within a facility. One access point is on channel 11 and the other two are on channel 1. The two access points using channel 1 are on either side of the access point using channel 11 and sufficiently apart so that they do not interfere with each other when they transmit frames. However, this does not prevent CCI from occurring between their client devices that are connected on channel 1. For example, if a client device connected to one of the channel 1 APs sends a frame to another device on the wired network or on another wireless network (such as an Internet server or a VoIP phone), that frame will be heard by both channel 1 APs as well as any other client devices connected to either of them on channel 1. This will cause CCI because these devices will have to wait for the channel to be clear before they can transmit their own frames. The answer that CCI only occurs in the 5 GHz frequency band is incorrect; CCI can occur in any frequency band where devices use the same channel. The answer that channel 11 loops around and causes CCI with channel 1 is also incorrect; channel 11 does not loop around and it operates in a different frequency band than channel 1. References: CWNA-109 Study Guide, Chapter 5: Radio Frequency Signal and Antenna Concepts, page 147

Implementing Fast BSS Transition (FT) for roaming is likely to cause the least impact on the application layer throughput of an 802.11n client station in a 2.4 GHz HT BSS. FT is a feature that allows a client station to quickly switch from one AP to another within the same ESS (Extended Service Set) without having to re-authenticate and re-associate with each AP. This reduces the latency and packet loss that may occur during roaming, thus improving the user experience and maintaining the application layer throughput. FT is defined in the IEEE 802.11r amendment and is also known as Fast Roaming or Fast Secure Roaming. References: , Chapter 9, page 367; , Section 6.3

A laptop-based spectrum analyzer with a directional antenna is the best solution for locating a non-802.11 device that is suspected of causing interference on the WLAN. A spectrum analyzer is a device or a software application that can measure and display the frequency spectrum of electromagnetic signals in a given range. A spectrum analyzer can show the amplitude, frequency, bandwidth, modulation, and other characteristics of different signals in the spectrum, which can help identify their sources and types. A spectrum analyzer can also detect non-802.11 devices that may cause interference on the WLAN, such as microwave ovens, cordless phones, Bluetooth devices, or radar systems. A laptop-based spectrum analyzer is a software application that runs on a laptop computer and uses an external USB adapter as its RF interface. A laptop-based spectrum analyzer has the advantage of being portable, flexible, and cost-effective compared to a hardware-based spectrum analyzer. A directional antenna is an antenna that radiates or receives RF signals more strongly in one direction than in others. A directional antenna has a high gain and a narrow beamwidth, which means it can focus the RF energy in a specific direction and reduce the interference from other directions. A directional antenna can also increase the range and sensitivity of the RF signal detection. To locate a non-802.11 device that is causing interference on the WLAN, a laptop-based spectrum analyzer with a directional antenna can be used to perform a technique called RF hunting or triangulation. This technique involves pointing the directional antenna in different directions and observing the signal strength and characteristics of the interfering device on the spectrum analyzer. By moving around and changing the direction of the antenna, the location of the interfering device can be estimated based on where the signal strength is highest and most consistent. References: 1, Chapter 7, page 282; 2, Section 4.3

WPA2 (Wi-Fi Protected Access 2) is a security certification program developed by the Wi-Fi Alliance to secure wireless computer networks. It is important to understand the following:

WPA2 and the 802.11 Standard: While WPA2 is based on elements of the 802.11i amendment to the 802.11 standard, it is not itself a standard but rather a certification to ensure devices comply with certain security criteria, including the correct implementation of CCMP (Counter Mode Cipher Block Chaining Message Authentication Code Protocol) and AES (Advanced Encryption Standard).

CCMP/AES Implementation: WPA2 enhances the security of wireless networks by using CCMP for encryption, which is based on AES, a robust encryption algorithm. This represents a significant security improvement over WEP (Wired Equivalent Privacy) and WPA (Wi-Fi Protected Access) that used TKIP (Temporal Key Integrity Protocol).

WPA vs. WPA2: WPA was the interim security enhancement over WEP, utilizing TKIP for encryption. WPA2, however, moved to the more secure AES-based encryption method. Contrary to option C, WPA2 does not enhance security by using TKIP; it uses CCMP/AES.

Therefore, option B correctly describes WPA2 as a certification program ensuring devices properly implement the more secure CCMP/AES encryption methods.

The likely cause of the problem is that the external hard drive is USB 3.0 and is causing a significant increase in the noise floor when in use. USB 3.0 devices are known to generate radio frequency interference (RFI) in the 2.4 GHz band due to their high data transfer rates and harmonics. This RFI can increase the noise floor and degrade the signal-to-noise ratio (SNR) of WLAN devices operating in the same band. This can result in lower data rates, reduced throughput, increased retransmissions, and poor performance. The problem may not occur outside of business hours or on the user’s home network because of different usage patterns or environmental factors. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 527; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 497.

a mesh portal is a device that connects a mesh BSS (MBSS) to an Ethernet network, such as the Internet. A mesh portal acts as a bridge between the wired and wireless domains, and allows the mesh stations to communicate with external networks. A mesh portal is also a mesh point, which means it can forward traffic within the MBSS.

The other options are not correct. Option A. Mesh Gate is a device that connects a mesh BSS (MBSS) to another mesh BSS or another wireless network, such as an infrastructure BSS or an ad hoc network2. A mesh gate acts as a gateway between different wireless domains, and allows the mesh stations to communicate with other wireless networks. A mesh gate is also a mesh point, which means it can forward traffic within the MBSS. Option B. Mesh Switch is not a valid term in the 802.11 standard. Option C. Mesh Router is also not a valid term in the 802.11 standard.

The CWNA Official Study Guide (CWNA-109), Chapter 8: Troubleshooting and Spectrum Analysis, explains that hidden node problems occur when two or more client stations cannot hear each other but can both communicate with the same access point. This leads to collisions at the AP because the clients transmit simultaneously without sensing each other’s signals.

“Hidden node problems can often be identified in a protocol analyzer by observing excessive retransmissions from specific client stations. These retransmissions occur because the station’s frames are not acknowledged due to collisions caused by other stations that the transmitter cannot hear.”

— CWNA-108 Study Guide, Chapter 8, Hidden Node Problem Analysis, p. 393–395

Therefore, when analyzing for a hidden node issue, you will typically observe:

Retransmitted frames from multiple STAs.

Higher retry counts for affected stations compared to others.

Hence, the correct answer is C. Retransmitted frames from multiple STAs with higher retry counts than other STAs.

The least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended is to use a 40 MHz channel on the 5 GHz radio. This solution can double the channel bandwidth and increase the data rates for the 5 GHz capable 802.11ac clients. Using a 40 MHz channel on the 5 GHz radio is also less likely to cause co-channel interference or overlap with other channels than using a 40 MHz channel on the 2.4 GHz radio, which has only three non-overlapping channels. Using a 160 MHz channel on the 5 GHz radio may provide even higher throughput, but it may also consume too much of the available spectrum and cause more interference with other devices or networks. Installing a second AP in the coverage area may also improve the throughput, but it may require additional costs and configuration. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 216; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 206.

Airtime Utilization is a per-channel statistic that defines what percentage of the channel is currently being used, and what percentage is therefore free. Airtime usage can come from: Data traffic to and from client devices. Interference from WiFi and non-WiFi sources. Management overhead from APs and client devices. https://wyebot.com/2019/06/06/understanding-airtime-utilization/

Granting access to specific network services or resources according to a user profile describes the authorization component of a AAA implementation. AAA stands for Authentication, Authorization, and Accounting, which are three functions that are used to control and monitor access to network resources and services. Authentication is the process of verifying that a user is who he says he is, by using credentials such as username, password, certificate, token, or biometric data. Authorization is the process of granting access to specific network services or resources according to a user profile, which defines the user’s role, privileges, and permissions. Accounting is the process of recording and reporting the usage of network services or resources by a user, such as the duration, volume, type, and location of the access. AAA can be implemented by using different protocols and servers, such as RADIUS, TACACS+, LDAP, Kerberos, or Active Directory. References: 1, Chapter 11, page 449; 2, Section 7.1

Calibrating the floor plan is what you must do before gathering survey data after the floor plan is imported when using a site survey tool for post-implementation validation. A site survey tool is a software application that can run on a laptop, tablet, smartphone, or other device that has a Wi-Fi adapter and a GPS receiver. A site survey tool can scan the wireless environment and collect information about the detected access points and client stations, such as their SSID, BSSID, channel, signal strength, security, and data rate. A site survey tool can also measure and display various metrics of network performance, such as throughput, jitter, packet loss, delay, and SNR. A site survey tool can also use a floor plan to visualize the wireless coverage and quality in different locations on a map. A floor plan is an image file that shows the layout and dimensions of a building or an area where the WLAN is deployed. A floor plan can be imported from various sources, such as a CAD file, a PDF file, an image file, or a Google Maps screenshot. After importing a floor plan into a site survey tool, it is necessary to calibrate the floor plan before gathering survey data. Calibrating the floor plan means adjusting the scale and orientation of the floor plan to match the actual size and direction of the area. Calibrating the floor plan can be done by using a reference point or a reference line that has a known distance or angle in the real world. Calibrating the floor plan ensures that the survey data is accurate and consistent with the physical environment. References: 1, Chapter 7, page 290; 2, Section 4.3

 The frame type that is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS is RTS. RTS stands for Request to Send and is a control frame that is sent by a station to request access to the medium for a specified duration. The RTS frame contains the source and destination MAC addresses, as well as a Network Allocation Vector (NAV) value that indicates how long the medium will be occupied. The destination station responds with a Clear to Send (CTS) frame that echoes the NAV value and grants permission to the source station. All other stations in the BSS hear either the RTS or CTS frame and update their NAV timers accordingly, deferring their transmissions until the medium is free. The RTS/CTS mechanism can be used to prevent hidden node problems, reduce collisions, and protect high data rate frames that use features such as 802.11n or 802.11ac that may not be compatible with legacy stations. ACK, Beacon, and PS-Poll are not used to reserve the medium for high data rate frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 112; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 102.

The center frequency of channel 4 in the 2.4 GHz band is 2.427 GHz (2427 MHz). The center frequency of a channel is the midpoint of its frequency range, where the signal strength is highest and most concentrated. The center frequency of channel 1 in the 2.4 GHz band is 2.412 GHz (2412 MHz), as given in the question. The center frequency of each subsequent channel is obtained by adding 5 MHz to the previous channel’s center frequency, since the channels are spaced 5 MHz apart from each other in this band. Therefore, to find the center frequency of channel 4, we need to add 15 MHz (5 MHz x 3) to the center frequency of channel 1:

2.412 GHz + 0.015 GHz = 2.427 GHz

Alternatively, we can use a formula to calculate the center frequency of any channel in the 2.4 GHz band:

Center frequency (GHz) = 2.407 + (0.005 x Channel number)

Using this formula for channel 4, we get:

Center frequency (GHz) = 2.407 + (0.005 x 4)

Center frequency (GHz) = 2.407 + 0.02

Center frequency (GHz) = 2.427 References: 1, Chapter 3, page 85; 2, Section 3.2

Return loss is a measure of how well the components of an RF system are matched in terms of their impedance. Impedance is the opposition to the flow of alternating current in a circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. When the impedance of the source, the transmission line, and the load are not equal, some of the power is reflected back to the source, causing a loss of forward power. This loss is expressed in decibels (dB) as return loss. The higher the return loss, the lower the reflection and the better the impedance matching. Conversely, the lower the return loss, the higher the reflection and the worse the impedance matching.

VSWR (Voltage Standing Wave Ratio) is another way of expressing the same concept. It is the ratio of the maximum voltage to the minimum voltage along a transmission line due to the interference of the incident and reflected waves. A VSWR of 1:1 means that there is no reflection and perfect impedance matching. A VSWR higher than 1:1 means that there is some reflection and impedance mismatch. The higher the VSWR, the higher the reflection and the lower the return loss.

Therefore, a significant impedance mismatch between components in an RF system will cause high reflection, high VSWR, and low return loss.

Cellular/LTE/5G is the best method for implementing a network backhaul for communications across the Internet in a remote area that is affected by a natural disaster. This is because cellular/LTE/5G networks are wireless and do not depend on physical infrastructure that may be damaged or unavailable in such scenarios. Cellular/LTE/5G networks also offer high-speed data transmission and wide coverage area, which are essential for emergency response operations. 802.11 bridging to the response team headquarters is not feasible because it requires line-of-sight and has limited range. Turning up the output power of the WLAN at the response team headquarters is not effective because it may cause interference and does not guarantee reliable connectivity. Temporary wired DSL is not practical because it requires installing cables and equipment that may not be available or accessible in a remote area. References: CWNA-109 Study Guide, Chapter 7: Wireless LAN Topologies, page 2031

The likely problem that causes this scenario is faulty drivers. Drivers are software components that enable the communication between the operating system and the hardware devices, such as the wireless adapters. Faulty drivers can cause various issues with the wireless connectivity, such as not detecting or connecting to certain networks, dropping connections, or reducing performance. Faulty drivers can be caused by corrupted files, outdated versions, incompatible settings, or hardware defects. To fix faulty drivers, you can try to update, reinstall, or roll back the drivers, or contact the manufacturer for support. Interference from non-Wi-Fi sources, DoS attack, or interference from other WLANs are not likely to cause this scenario, as they would affect all devices in the same area, not just the new laptops. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 562; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 532.

In wireless communication, several factors influence the effective reception of RF signals, including the receiving station's radio sensitivity, the transmitting station's output power, and free space path loss. However, the receiving station's output power does not influence the distance at which an RF signal can be effectively received. The key factors that impact signal reception distance are:

Receiving Station's Radio Sensitivity: This refers to the lowest signal strength at which the receiver can process a signal with an acceptable error rate. Higher sensitivity allows for better reception at greater distances.

Transmitting Station's Output Power: This is the power with which a transmitter sends out a signal. Higher output power can extend the range of transmission, making it easier for distant receivers to detect the signal.

Free Space Path Loss (FSPL): FSPL represents the attenuation of radio energy as it travels through free space. It increases with distance and frequency, reducing the signal strength as the distance from the transmitter increases.

The output power of the receiving station is related to how strong a signal it sends out, not how well it can receive or process incoming signals. Therefore, it does not affect the reception distance of incoming RF signals.

 VSWR stands for Voltage Standing Wave Ratio, which is a measure of how well the impedance of the RF cable and connectors matches the impedance of the transmitter and the antenna. Impedance is the opposition to the flow of alternating current in an RF circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. A perfect impedance match would have a VSWR of 1:1, meaning that all the power is transferred from the transmitter to the antenna, and none is reflected back. However, in reality, there is always some degree of mismatch, which causes some power to be reflected back to the transmitter, creating standing waves along the cable. This reduces the efficiency and performance of the wireless system, and can also damage the transmitter. Excessive VSWR can be caused by using poor quality or damaged cables and connectors, or by using components that have different impedance ratings123. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 90; CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 86; CWNP website, CWNA Certification.

 This is because the passphrase for WPA2-Personal is case-sensitive and must match exactly on both the AP and the client. If the passphrase is entered incorrectly on the client, the client will not be able to authenticate with the AP and connect to the network. The AP that covers the problem area is not likely to require a firmware update, fail, or be improperly configured, as it is online and works with other clients that have the correct passphrase. To troubleshoot this issue, you can check the passphrase settings on the clients and make sure they match with the AP. You can also try to reconnect the clients to the network or reboot them if necessary. For more information on how to configure WPA2-Personal on your router

An ACK (Acknowledgement) frame is a short control frame that is sent by the receiver of a data or management frame to confirm that the frame was received correctly. The ACK frame is sent after a SIFS (Short Interframe Space) interval, which is the shortest time gap between frames in 802.11. If the transmitter does not receive an ACK frame within a specified time, it assumes that the frame was not delivered and must be retransmitted. This is part of the 802.11 reliability mechanism that ensures reliable data delivery over an unreliable wireless medium . References: [CWNA-109 Study Guide], Chapter 5: IEEE 802.11 Medium Access, page 209; [CWNA-109 Study Guide], Chapter 5: IEEE 802.11 Medium Access, page 203.

The final step in an effective troubleshooting process is to document the results. Documentation is essential for keeping track of the problem history, the actions taken, the solutions implemented, and the outcomes achieved. Documentation can also help to prevent future problems, improve best practices, and provide feedback for improvement. Documentation should include relevant information such as problem description, symptoms, root cause analysis, resolution steps, verification methods, and lessons learned. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 513; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 483.

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchange protocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 297.

In the 802.11 wireless networking protocols, when a client station sends a broadcast probe request frame with a wildcard SSID (Service Set Identifier), it is essentially asking for any nearby access points (APs) to identify themselves. The way APs respond to such a probe request is governed by standard 802.11 behavior, which includes:

Probe Request Handling: Upon receiving a broadcast probe request, each AP that can serve the client prepares a probe response. The response includes information about the AP, such as its SSID, supported data rates, and other capabilities.

Contention-Based Mechanism: Wireless networks use a contention-based mechanism (CSMA/CA - Carrier Sense Multiple Access with Collision Avoidance) for medium access. Each AP must wait for a clear channel and win the contention process before it can send its probe response.

Independent Responses: Each AP operates independently in responding to the probe request. There is no coordination between APs to decide which one responds first or at all, leading to multiple APs sending probe responses, each after winning the contention for the medium.

Option A accurately reflects this process, indicating that each AP prepares and sends a probe response in turn, contingent upon winning the medium contention. The other options suggest mechanisms (such as coordination with a DHCP server or simultaneous responses after a Short Interframe Space (SIFS)) that do not align with standard 802.11 procedures for handling broadcast probe requests.

VHT stands for Very High Throughput, which is a physical layer (PHY) specification that supports the 5 GHz frequency band and supports 80 MHz channels. VHT is used by the IEEE 802.11ac standard, which is also known as Wi-Fi 5. VHT allows for higher data rates and more spatial streams than the previous HT (High Throughput) PHY, which is used by the IEEE 802.11n standard, also known as Wi-Fi 4. HT supports the 2.4 GHz and 5 GHz bands, but only supports up to 40 MHz channels12

The other options are not correct because:

ERP (option C) stands for Extended Rate PHY, which is a physical layer specification that supports the 2.4 GHz frequency band and supports up to 20 MHz channels. ERP is used by the IEEE 802.11g standard, which is also known as Wi-Fi 3. ERP allows for higher data rates than the previous DSSS (Direct Sequence Spread Spectrum) PHY, which is used by the IEEE 802.11b standard, also known as Wi-Fi 234

OFDM (option D) stands for Orthogonal Frequency Division Multiplexing, which is a modulation technique that divides a signal into multiple subcarriers that are spaced orthogonally to each other. OFDM is not a physical layer specification, but a common feature of many PHY specifications, including ERP, HT, and VHT. OFDM allows for higher spectral efficiency and robustness against multipath interference than the previous CCK (Complementary Code Keying) modulation technique used by DSSS34

VoIP (Voice over Internet Protocol) is an application that is likely used that demands the requirements of unidirectional delays of less than 150 ms and the signal strength at all receivers can be no lower than -67 dBm. VoIP is an application that allows users to make and receive voice calls over a network, such as the Internet or a WLAN. VoIP is a real-time and interactive application that requires high quality of service (QoS) to ensure good user experience and satisfaction. One of the QoS metrics for VoIP is delay, which is the time it takes for a voice packet to travel from the sender to the receiver. Delay can affect the quality and intelligibility of the voice conversation, as well as the synchronization and naturalness of the dialogue. The ITU-T G.114 recommendation suggests that the maximum acceptable one-way delay for VoIP should be less than 150 ms, as anything higher than that can cause noticeable degradation and annoyance to the users. Another QoS metric for VoIP is signal strength, which is the measure of how strong the RF signal is at the receiver. Signal strength can affect the reliability and performance of the wireless connection, as well as the data rate and throughput of the VoIP traffic. The CWNA Official Study Guide recommends that the minimum signal strength for VoIP should be -67 dBm, as anything lower than that can cause packet loss, retries, jitter, and other issues that can impair the voice quality. References: 1, Chapter 10, page 398; 2, Section 6.1

The BSSID (Basic Service Set Identifier) is typically mapped to an AP’s MAC address if a single BSS is implemented. The BSSID is a unique identifier that distinguishes one BSS from another within the same RF medium. It is usually derived from the MAC address of the AP’s radio interface, but it can also be manually configured or randomly generated by some vendors. The BSSID is used by client stations to associate with an AP and to send and receive frames within a BSS. References: , Chapter 1, page 24; , Section 1.2

What should be inspected to verify proper configuration is DNS. DNS stands for Domain Name System and is a service that resolves hostnames to IP addresses. In a controller-based AP deployment, DNS can be used to help the AP locate the controller by using a predefined hostname such as CISCO-CAPWAP-CONTROLLER or aruba-master. The AP sends a DNS query for this hostname and receives an IP address of the controller as a response. Therefore, if DNS is not configured properly or if there is no DNS entry for the controller hostname, the AP may not be able to locate the controller. NTP, BOOTP, and AP hosts file are not relevant for this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 374; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 364.

In the 802.11ax (High Efficiency, HE) amendment, one of the key features introduced is BSS (Basic Service Set) Coloring. This feature is designed to mitigate issues arising from overlapping BSSs (OBSS), which can lead to contention and interference in dense wireless environments. BSS Coloring works by:

Assigning a "color" (a small number) to each BSS: This helps devices differentiate between frames from their own BSS and those from neighboring BSSs.

Reducing Inter-BSS Interference: Devices can ignore frames from different BSSs (with a different "color") under certain conditions, reducing the impact of OBSS interference.

Improving Spatial Reuse: By distinguishing between transmissions from different BSSs, devices can make more informed decisions about when to transmit, improving the efficiency of spatial reuse and reducing unnecessary contention.

This feature directly impacts design decisions related to AP placement and the spacing between same-channel BSS cells, as it allows for closer placement of APs on the same channel without significantly increasing interference, thus improving overall network capacity and efficiency.

The other options, while features of 802.11ax, do not directly pertain to reducing overlapping BSS contention in the same manner:

TWT (Target Wake Time) optimizes device sleep schedules to conserve power.

Uplink MU-MIMO enhances uplink data transmission capabilities but doesn't specifically address OBSS contention.

6 GHz Band Support introduces new spectrum for Wi-Fi use but is not a feature aimed at reducing OBSS contention within the 802.11ax framework.

Therefore, the correct answer is B, BSS Color.

The string of characters and digits that is entered into an AP and a client STA for WPA2 security and is 8 characters long is called a passphrase. A passphrase is a human-readable text that is used to generate a Pre-Shared Key (PSK) for WPA2-Personal security. A passphrase can be between 8 and 63 characters long and can include any ASCII character. The PSK is a 256-bit key that is derived from the passphrase using a hashing algorithm called PBKDF2. The PSK is used to encrypt and decrypt the data frames between the AP and the client STA. A MSK is a Master Session Key that is generated by an authentication server for WPA2-Enterprise security. A WEP key is a 40-bit or 104-bit key that is used for Wired Equivalent Privacy (WEP) security, which is deprecated and insecure. A PSK is not a string of characters and digits, but a binary key. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 303; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 293.

The error in administration that could be the cause of this security concern is that HTTP is in use instead of HTTPS. HTTP is an unencrypted protocol that transfers data in plain text over the network. This means that anyone who captures the traffic can see the HTML code of the Web pages used for access point management, as well as any sensitive information such as passwords or configuration settings. HTTPS is an encrypted protocol that uses SSL/TLS to secure the data transmission between the Web browser and the Web server. HTTPS prevents anyone from snooping on or tampering with the Web traffic. Therefore, HTTPS should always be used for Web based management of wireless access points, especially in autonomous mode where there is no centralized controller to enforce security policies. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 431; [HTTP vs HTTPS: What’s The Difference And Why Should You Care?].

What is always required to establish a high quality 2.4 GHz RF link at a distance of 3 miles (5 kilometers) is a Fresnel Zone that is at least 60% clear of obstructions. The Fresnel Zone is an elliptical-shaped area around the line-of-sight path between two antennas that reflects and refracts the RF waves. The Fresnel Zone radius depends on the frequency of the RF signal and the distance between the antennas. For optimal performance, the Fresnel Zone should be at least 60% clear of any obstructions that may cause interference, attenuation, or multipath fading. The minimum output power level, antenna gain, and antenna type may vary depending on the environmental conditions and regulatory constraints, but they are not always required for a high quality RF link. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 75; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 65.

It is a channel that may require DFS when used is an important fact that should be considered about channel 128. Channel 128 is a 5 GHz frequency band 20 MHz channel that has a center frequency of 5.64 GHz. Channel 128 is one of the channels that are subject to DFS (Dynamic Frequency Selection) rules, which require Wi-Fi devices to monitor and avoid using channels that are occupied by radar systems or other primary users. DFS is a feature that is defined in the IEEE 802.11h amendment and is mandated by some regulatory bodies, such as the FCC and the ETSI, to protect the licensed users of the 5 GHz band from interference by unlicensed Wi-Fi devices. DFS works by using a mechanism called channel availability check (CAC), which requires Wi-Fi devices to scan a channel for a certain period of time before using it. If a radar signal is detected during the CAC or while using the channel, the Wi-Fi devices must switch to another channel that is free from radar interference.

When configuring an access point to use channel 128, it is important to consider the implications of DFS rules, such as:

The access point must support DFS and comply with the local regulations and standards that apply to DFS channels.

The access point may experience delays or interruptions in its operation due to CAC or channel switching.

The access point may have limited channel selection or availability due to radar interference or other Wi-Fi devices using DFS channels.

The access point may have compatibility or interoperability issues with some client devices that do not support DFS or use different DFS parameters.

The access point may have performance or quality issues due to co-channel or adjacent-channel interference from other Wi-Fi devices using non-DFS channels.

Therefore, it is advisable to use channel 128 only when necessary and after performing a thorough site survey and spectrum analysis to determine the best channel for the access point. References: 1, Chapter 3, page 117; 2, Section 3.2

SAE (Simultaneous Authentication of Equals) is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication. SAE is a secure and robust authentication method that is defined in the IEEE 802.11s amendment and is also known as WPA3-Personal or WPA3-SAE. SAE is based on a cryptographic technique called Dragonfly Key Exchange, which allows two parties to establish a shared secret key using a passphrase, without revealing the passphrase or the key to an eavesdropper or an attacker. SAE also provides forward secrecy, which means that if the passphrase or the key is compromised in the future, it does not affect the security of past communications.

SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because of the new regulations and standards that apply to this band. The 6 GHz band is a new frequency band that was opened for unlicensed use by the FCC and other regulatory bodies in 2020. The 6 GHz band offers more spectrum and less interference than the existing 2.4 GHz and 5 GHz bands, which can enable higher performance and efficiency for Wi-Fi devices. However, the 6 GHz band also has some restrictions and requirements that are different from the other bands, such as:

The 6 GHz band is divided into two sub-bands: U-NII-5 (5925-6425 MHz) and U-NII-7 (6525-6875 MHz). The U-NII-5 sub-band is subject to DFS (Dynamic Frequency Selection) rules, which require Wi-Fi devices to monitor and avoid using channels that are occupied by radar systems or other primary users. The U-NII-7 sub-band is not subject to DFS rules, but it has a lower maximum transmit power limit than the U-NII-5 sub-band.

The Wi-Fi devices that operate in the 6 GHz band are called 6E devices, which stands for Extended Spectrum. 6E devices must support 802.11ax technology, which is also known as Wi-Fi 6 or High Efficiency (HE). 802.11ax is a new standard that improves the performance and efficiency of Wi-Fi networks by using features such as OFDMA (Orthogonal Frequency Division Multiple Access), MU-MIMO (Multi-User Multiple Input Multiple Output), BSS Coloring, TWT (Target Wake Time), and HE PHY and MAC enhancements.

The 6E devices that operate in the 6 GHz band must also support WPA3 security, which is a new security protocol that replaces WPA2 and provides stronger encryption and authentication for Wi-Fi networks. WPA3 has two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses SAE as its authentication method, which requires a passphrase to establish a secure connection between two devices. WPA3-Enterprise uses EAP (Extensible Authentication Protocol) as its authentication method, which requires a certificate or a credential to authenticate with a server.

Therefore, SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because it is part of WPA3-Personal security, which is mandatory for 6E devices in this band. References: , Chapter 3, page 120; , Section 3.2

9of30

The unit of measurement that is an absolute unit and is used to quantify received signal power levels on a logarithmic scale is dBm. dBm stands for decibel-milliwatt and represents the power level relative to 1 milliwatt (mW). dBm is an absolute unit because it has a fixed reference point and does not depend on the input power level. dBm is used to measure the received signal power levels on a logarithmic scale because it can express large variations in power levels with small numbers and make calculations easier. For example, a 10 dB increase in power level means a 10-fold increase in power, and a 20 dB increase means a 100-fold increase in power. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 66; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 56.

DHCP (Dynamic Host Configuration Protocol) is the network service where option 43 must be configured to allow access points to locate controllers. DHCP is a protocol that allows a device to obtain an IP address and other network configuration parameters from a server. In a wireless controller scenario, the access points can use DHCP to request an IP address from a DHCP server, which can also provide the IP address or hostname of the wireless controller as an option in the DHCP response. Option 43 is a vendor-specific option that can be used to encode custom information for different types of devices. For example, Cisco access points can use option 43 to receive the IP address of the wireless controller from the DHCP server, while Aruba access points can use option 43 to receive the hostname of the wireless controller from the DHCP server. This way, the access points can discover the wireless controller and establish a connection with it. References: 1, Chapter 8, page 309; 2, Section 5.2