CWNA-109 Certified Wireless Network Administrator Questions and Answers

In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical step is:

• Station-to-Station Traffic Blocking: Also known as client isolation, this feature prevents direct communication between devices connected to the Wi-Fi network. By enabling this on the access points, Lynne can significantly decrease the likelihood of active attacks like man-in-the-middle (MITM) attacks, where an attacker intercepts and possibly alters the communication between two parties.

The other options, while beneficial for network security, might not be as straightforward or practical for Lynne's situation:

• Network Access Control (NAC)requires a more complex infrastructure and management, which might not be ideal for a small hotel setup.
• Implementing an SSL VPNadds an extra layer of security but might complicate the login process for users, potentially affecting the user experience.
• Requiring EAP-FAST authenticationprovides secure authentication but may not be feasible for transient customers who expect quick and easy network access.

Therefore, enabling station-to-station traffic blocking is a practical and efficient measure that Lynne can implement to enhance customer security on the Wi-Fi network.

References:

• CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.
• Best practices for securing a wireless network in a public hotspot environment.

The HT (802.11n) physical layer (PHY) specification includes support for and compatibility with both ERP and HR/DSSS. ERP stands for Extended Rate PHY, which is an extension of the original DSSS (Direct Sequence Spread Spectrum) PHY that supports data rates up to 54 Mbps in the 2.4 GHz band. HR/DSSS stands for High Rate/Direct Sequence Spread Spectrum, which is another extension of DSSS that supports data rates up to 11 Mbps in the 2.4 GHz band. HT stands for High Throughput, which is a new PHY that supports data rates up to 600 Mbps in both the 2.4 GHz and 5 GHz bands. HT uses OFDM (Orthogonal Frequency Division Multiplexing) as its modulation scheme, but it also supports legacy DSSS and ERP devices by using a dual preamble and header structure that allows backward compatibility. References: , Chapter 3, page 103; , Section 3.1

The least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended is to use a 40 MHz channel on the 5 GHz radio. This solution can double the channel bandwidth and increase the data rates for the 5 GHz capable 802.11ac clients. Using a 40 MHz channel on the 5 GHz radio is also less likely to cause co-channel interference or overlap with other channels than using a 40 MHz channel on the 2.4 GHz radio, which has only three non-overlapping channels. Using a 160 MHz channel on the 5 GHzradio may provide even higher throughput, but it may also consume too much of the available spectrum and cause more interference with other devices or networks. Installing a second AP in the coverage area may also improve the throughput, but it may require additional costs and configuration. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 216; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 206.

A VoIP phone is least likely to be a POE PSE of the devices listed. POE stands for Power over Ethernet, which is a technology that allows devices to receive both power and data over a single Ethernet cable. A POE PSE stands for Power Sourcing Equipment, which is a device that provides power to other devices over Ethernet. A POE PD stands for Powered Device, which is a device that receives power from a PSE over Ethernet. A midspan multi-port injector, a switch, and a midspan injector are examples of POE PSEs, as they can supply power to multiple devices over Ethernet cables. A VoIP phone is an example of a POE PD, as it can receive power from a PSE over an Ethernet cable. However, some VoIP phones can also act as POE PSEs for other devices, such as IP cameras or wireless access points, but this is not very common. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2411

The client STA can use Beacon frames transmitted by the AP to verify that an AP supports the same data rates that it supports. Beacon frames are management frames that are periodically broadcasted by the APs to announce their presence, capabilities, and parameters. Oneof the information elements contained in the Beacon frames is the Supported Rates or Extended Supported Rates, which lists the data rates that the AP can use for communication. The client STA can compare its own data rates with those advertised by the AP to determine if they are compatible. Data frames, authentication frames, and probe request frames do not contain information about data rates. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 133; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 123.

OFDM (Orthogonal Frequency Division Multiplexing) is the physical layer specification (PHY) that VHT capable devices must be backward compatible with according to the IEEE 802.11-2012 standard. VHT (Very High Throughput) is aPHY and MAC enhancement that is defined in the IEEE 802.11ac amendment and is also known as Wi-Fi 5. VHT operates only in the 5 GHz band and uses features such as wider channel bandwidths (up to 160 MHz), higher modulation schemes (up to 256-QAM), more spatial streams (up to eight), multi-user MIMO (MU-MIMO), beamforming, and VHT PHY and MAC enhancements. VHT can achieve data rates up to 6.9 Gbps.

According to the IEEE 802.11-2012 standard, VHT capable devices must be backward compatible with devices using OFDM PHY, which is defined in the IEEE 802.11a amendment and is also used by IEEE 802.11g, IEEE 802.11n, and IEEE 802.11h amendments. OFDM operates in both the 2.4 GHz and 5 GHz bands and uses features such as subcarriers, symbols, guard intervals, and OFDM PHY and MAC enhancements. OFDM can achieve data rates up to 54 Mbps.

Backward compatibility means that VHT capable devices can interoperate with OFDM devices on the same network by using common features and parameters that are supported by both PHYs. For example, VHT capable devices can use a channel bandwidth of 20 MHz, a modulation scheme of BPSK, QPSK, or 16-QAM, one spatial stream, no beamforming, and OFDM PHY and MAC headers when communicating with OFDM devices. Backward compatibility also means that VHT capable devices can fall back to OFDMmode when the signal quality or SNR is too low for VHT mode. References: 1, Chapter 3, page 123; 2, Section 3.2

SAE (Simultaneous Authentication of Equals) is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication. SAE is a secure and robust authentication method that is defined in the IEEE 802.11s amendment and is also known as WPA3-Personal or WPA3-SAE. SAE is based on a cryptographic technique called Dragonfly Key Exchange, which allows two parties to establish a shared secret key using a passphrase, without revealing the passphrase or the key to an eavesdropper or an attacker. SAE also provides forward secrecy, which means that if the passphrase or the key is compromised in the future, it does not affect the security of past communications.

SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because of the new regulations and standards that apply to this band. The 6 GHz band is a new frequency band that was opened for unlicensed use by the FCC and other regulatory bodies in 2020. The 6 GHz band offers more spectrum and less interference than the existing 2.4 GHz and 5 GHz bands, which can enable higher performance and efficiency for Wi-Fi devices. However, the 6 GHz band also has some restrictions and requirements that are different from the other bands, such as:

• The 6 GHz band is divided into two sub-bands: U-NII-5 (5925-6425 MHz) and U-NII-7 (6525-6875 MHz). The U-NII-5 sub-band is subject to DFS (Dynamic Frequency Selection) rules, which require Wi-Fi devices to monitor and avoid using channels that are occupied by radar systems or other primary users. The U-NII-7 sub-band is not subject to DFS rules, but it has a lower maximum transmit power limit than the U-NII-5 sub-band.
• The Wi-Fi devices that operate in the 6 GHz band are called 6E devices, which stands for Extended Spectrum. 6E devices must support 802.11ax technology, which is also known as Wi-Fi 6 or High Efficiency (HE). 802.11ax is a new standard that improves the performance and efficiency of Wi-Fi networks by using features such as OFDMA (Orthogonal Frequency Division Multiple Access), MU-MIMO (Multi-User Multiple Input Multiple Output), BSS Coloring, TWT (Target Wake Time), and HE PHY and MAC enhancements.
• The 6E devices that operate in the 6 GHz band must also support WPA3 security, which is a new security protocol that replaces WPA2 and provides stronger encryption and authentication for Wi-Fi networks. WPA3 has two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses SAE as its authentication method, which requires a passphrase to establish a secure connection between two devices. WPA3-Enterprise uses EAP (Extensible Authentication Protocol) as its authentication method, which requires a certificate or a credential to authenticate with a server.

Therefore, SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because it is part of WPA3-Personal security, which is mandatory for 6E devices in this band. References: , Chapter 3, page 120; , Section 3.2

9of30

The term used to describe the problem in this configuration is Co-Channel Interference (CCI)1. CCI occurs when multiple access points are on the same or overlapping channels, causing interference and degradation in network performance1. In this case, one AP is on channel 1 and the other is on channel 2, which are overlapping channels, leading to CCI1.

The likely problem that causes this scenario is faulty drivers. Drivers are software components that enable the communication between the operating system and the hardware devices, such as the wireless adapters. Faulty drivers can cause various issues with the wireless connectivity, such as not detecting or connecting to certain networks, dropping connections, or reducing performance. Faulty drivers can be caused by corrupted files, outdated versions, incompatible settings, or hardware defects. To fix faulty drivers, you can try to update, reinstall, or roll back the drivers, or contact the manufacturer for support. Interference from non-Wi-Fi sources, DoS attack, or interference from other WLANs are not likely to cause this scenario, as they would affect all devices in the same area, not just the new laptops. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 562; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 532.

In the 802.11 wireless networking protocols, when a client station sends a broadcast probe request frame with a wildcard SSID (Service Set Identifier), it is essentially asking for any nearby access points (APs) to identify themselves. The way APs respond to such a probe request is governed by standard 802.11 behavior, which includes:

• Probe Request Handling: Upon receiving a broadcast probe request, each AP that can serve the client prepares a probe response. The response includes information about the AP, such as its SSID, supported data rates, and other capabilities.
• Contention-Based Mechanism: Wireless networks use a contention-based mechanism (CSMA/CA - Carrier Sense Multiple Access with Collision Avoidance) for medium access. Each AP must wait for a clear channel and win the contention process before it can send its probe response.
• Independent Responses: Each AP operates independently in responding to the probe request. There is no coordination between APs to decide which one responds first or at all, leading to multiple APs sending probe responses, each after winning the contention for the medium.

Option A accurately reflects this process, indicating that each AP prepares and sends a probe response in turn, contingent upon winning the medium contention. The other options suggest mechanisms (such as coordination with a DHCP server or simultaneous responses after a Short Interframe Space (SIFS)) that do not align with standard 802.11 procedures for handling broadcast probe requests.

References:

• IEEE 802.11 Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications.
• CWNA Certified Wireless Network Administrator Official Study Guide: Exam PW0-105, by David D. Coleman and David A. Westcott.

The fact that is true regarding controllers and APs in a Split MAC architecture is that an IP tunnel is established between the AP and controller for AP management and control functions. A Split MAC architecture is a WLAN architecture where some of the MAC layer functions are performed by the APs (such as encryption, decryption, and frame acknowledgement) and some are performed by the controllers (such as authentication, association, roaming, and QoS). To communicate with each other, the APs and controllers establish an IP tunnel that carries the management and control frames between them. The IP tunnel can use protocols such as Lightweight Access Point Protocol (LWAPP) or Control And Provisioning of Wireless Access Points (CAPWAP). References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 372; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 362.

Shared Key Authentication is a security solution that was defined in the original 802.11 standard as an alternative to Open System Authentication, which does not provide any security at all. Shared Key Authentication uses WEP (Wired Equivalent Privacy) to encrypt and authenticate data frames between the client station and the AP. However, WEP has been proven to be extremely vulnerable to various attacks that can easily crack the encryption key and compromise the network security. Therefore, Shared Key Authentication is deprecated in the 802.11 standard and should never be used in any modern WLAN deployment . References: [CWNA-109 Study Guide], Chapter 10: Wireless LAN Security, page 401; [CWNA-109Study Guide], Chapter 10: Wireless LAN Security, page 391; [Wikipedia], Wired Equivalent Privacy.

The IEEE 802.11ax standard, also known as High-Efficiency Wireless (HEW) or simply HE, includes support for operation across multiple frequency bands: 2.4 GHz, 5 GHz, and, with the appropriate regulatory approvals, the 6 GHz band. This makes option D the correct answer. Here's how it compares to the other options:

• HE (802.11ax): Introduced as an enhancement over previous standards, 802.11ax is designed to improve efficiency, especially in dense environments. It supports operation in the 2.4 GHz, 5 GHz, and 6 GHz bands (the latter pending regulatory approval in various regions), making it highly versatile and future-proof.
• VHT (802.11ac): Very High Throughput, or 802.11ac, operates exclusively in the 5 GHz band. It introduced significant speed improvements over its predecessor (802.11n) but does not support the 2.4 GHz or 6 GHz bands.
• HT (802.11n): High Throughput, or 802.11n, supports operation in both the 2.4 GHz and 5 GHz bands. However, it does not include support for the 6 GHz band.
• HR/DSSS (802.11b): High-Rate Direct Sequence Spread Spectrum, or 802.11b, operates only in the 2.4 GHz band. It was one of the early Wi-Fi standards and does not support 5 GHz or 6 GHz bands.

Given these distinctions, only 802.11ax (option D) supports operation across all three mentioned bands, aligning with the requirements stated in the question.

References:

• IEEE 802.11ax-2021: High-Efficiency Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications.
• Understanding the 802.11ax (Wi-Fi 6) standard and its implications for modern wireless networking.

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 289.

 The frame type that is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS is RTS. RTS stands for Request to Send and is a control frame that is sent by a station to request access to the medium for a specified duration. The RTS frame contains the source and destination MAC addresses, as well as a Network Allocation Vector (NAV) value that indicates how long the medium will be occupied. The destination station responds with a Clear to Send (CTS) frame that echoes the NAV value and grants permission to the source station. All other stations in the BSS hear either the RTS or CTS frame and update their NAV timers accordingly, deferring their transmissions until the medium is free. The RTS/CTS mechanism can be used to prevent hidden node problems, reduce collisions, and protect high data rate frames that use features such as 802.11n or 802.11ac that may not be compatible with legacy stations. ACK, Beacon, and PS-Poll are not used to reserve the medium for high data rate frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 112; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 102.

 What you should tell him is that due to 802.11 network operations and the dynamic rates used by devices on the network, the two radios will likely not exceed the 1 Gbps Ethernet link. This is because the actual throughput of an 802.11 network is much lower than the theoretical data rates due to factors such as overhead, contention, interference, retransmissions, and environmental conditions. Moreover, the data rates used by devices on the network vary depending on their distance, signal quality, capabilities, and configuration. Therefore, it is unlikely that both radios of the AP will simultaneously use the maximum data rates and saturate the 1 Gbps Ethernet link. Upgrading to a 10 Gbps Ethernet link or running a second 1 Gbps Ethernet link may be unnecessary and costly. Compressing all data before transmitting it onto the Ethernet link may introduce additional overhead and latency. References: [CWNP CertifiedWireless Network Administrator Official Study Guide: ExamCWNA-109], page 227; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 217.

The guard interval is a short period of time inserted between the symbols of an OFDM signal to prevent inter-symbol interference and improve the robustness of the transmission1. The guard interval can have different values depending on the 802.11 standard and the configuration of the device. For example, 802.11n supports two guard intervals: 800 ns (normal) and 400 ns (short)2. 802.11ac supports the same guard intervals as 802.11n, plus an optional 200 ns guard interval for 80 MHz and 160 MHz channels3. 802.11ax supports three guard intervals: 800 ns, 1600 ns, and 3200 ns4.

The guard interval affects the data rate because it determines the duration of each symbol. A shorter guard interval means more symbols can be transmitted in a given time, resulting in a higher data rate. However, a shorter guard interval also means less protection against inter-symbol interference, which may degrade the signal quality and increase the error rate. Therefore, there is a trade-off between data rate and reliability when choosing the guard interval.

The MCS tables for HT and VHT PHY devices show the data rates for different combinations of modulation, coding, channel width, spatial streams, and guard intervals. For example, for a VHT device using MCS 9 with QAM-256 modulation, 5/6 coding rate, 80 MHz channel width, and one spatial stream, the data rate is 433.3 Mbps with a normal guard interval (800 ns) and 486.7 Mbps with a short guard interval (400 ns)2. Therefore, the guard interval impacts the data rate according to the MCS tables.

To calculate the EIRP at the antenna element, we need to add the transmitter output power, subtract the cable loss, and add the antenna gain. All these values need to be converted to dBm first, if they are not already given in that unit. In this case, we have:

Transmitter output power = 50 mW = 10 log (50) dBm = 16.99 dBm Cable loss = 3 dB Antenna gain = 9 dBi

EIRP = Transmitter output power - Cable loss + Antenna gain EIRP = 16.99 - 3 + 9 EIRP = 22.99 dBm

Rounding up to the nearest integer, we get 23 dBm as the EIRP at the antenna element12. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 92; CWNA-109Study Guide, Chapter 2: Radio Frequency Fundamentals, page 88.

https://7signal.com/802-11ac-migration-part-2-whats-nobodys-telling-you-about-80mhz-and-160mhz-channel-bonding

The clients are all 802.11n STAs or lower is the likely cause of this behavior. If a WLAN with 100 802.11ac access points is configured to use 80 MHz channels, butonly 40 MHz communications are seen in a particular BSS, it means that the clients in that BSS do not support 80 MHz channels. This could be because they are using older standards, such as 802.11n or lower, that do not support 80 MHz channels. Alternatively, they could be using newer standards, such as 802.11ac or ax, but have their channel width settings limited to 40 MHz or lower due to device capabilities or configuration options. In either case, the AP will adapt to the client’s channel width and use only 40 MHz of the 80 MHz allocated bandwidth to communicate with them. This will reduce the potential throughput and efficiency of the WLAN. References: , Chapter 3, page 111; , Section 3.2

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchangeprotocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.

Fade Margin is an additional pad of signal strength designed into the RF system to compensate for unpredictable signal fading. It is the difference between the receiver’s sensitivity and the actual received signal level. A higher Fade Margin indicates a more robust link that can withstand interference, attenuation, or other factors that may reduce the signal strength. A lower Fade Margin means that the link is more susceptible to failure or performance degradation. Fade Margin is usually expressed in decibels (dB) and can be calculated by subtracting the receiver sensitivity from the received signal level. References: 1, Chapter 2, page 51; 2, Section 2.1

A POE device that requires 47 W of power should use the 802.3bt specification. This is because 802.3bt is the latest POE standard that supports up to 90 W of power delivery over four pairs of wires in an Ethernet cable. The previous POE standards, such as 802.3af and 802.3at, only support up to 15.4 W and 30 W of power delivery over two pairs of wires in an Ethernet cable, respectively. Therefore, they are not sufficient for powering a device that requires 47 W of power. The 802.11at specification does not exist; it is a typo or confusion with the 802.3at specification. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2431

Sensors should be deployed in critical areas where WLAN performance must be high for best results when using a WLAN monitoring solution that utilizes distributed sensor devices. A WLAN monitoring solution is a system that collects, analyzes, and reports on the status and performance of a WLAN. A WLAN monitoring solution can use different methods to gather data from the WLAN, such as embedded software agents, external hardware probes, or distributed sensor devices. Distributed sensor devices are dedicated devices that are deployed throughout the WLAN coverage area to monitor the wireless traffic and environment. Distributed sensor devices can perform various functions, such as scanning the spectrum, capturing wireless frames, measuring signal quality, detecting rogue access points, testing connectivity, and generating alerts. Distributed sensor devices can provide more accurate and comprehensive data than other methods, but they also require more planning and deployment costs. Therefore, it is important to deploy sensors strategically in critical areas where WLAN performance must be high, such as high-density zones, high-priority applications, or high-security locations. By deploying sensors in critical areas, the WLAN monitoring solution can ensure optimal WLAN performance and reliability in those areas and identify and resolve any issues or problems that may arise. The other options are not the best places to deploy sensors for best results. Deploying sensors in switching closets is not effective because sensors need to be close to the wireless medium to monitor it properly. Deploying sensors every 5 meters and alongside each AP is not efficient because sensors may overlap or interfere with each other and cause unnecessary redundancy or complexity. Deploying sensors above the plenum oneach floor is not practical because sensors may not capture the wireless traffic and environment accurately due to attenuation or reflection from the ceiling materials or objects. References: CWNA-109 Study Guide, Chapter 14: Troubleshooting Wireless LANs, page 4831

The security option for 802.11 networks that supports SAE and requires protected management frames is WPA3. WPA3 stands for Wi-Fi Protected Access version 3 and is the latest security standard for WLANs. WPA3 supports two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. WPA3 also requires protected management frames, which are encrypted frames that prevent spoofing, replay, or denial-of-service attacks on management frames such as deauthentication or disassociation frames. WPA, WPA2, and OWE do not support SAE or require protected management frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.

Discovering the scale of the problem is the next logical step in the troubleshooting process after identifying the problem of poor wireless connections on the third floor of a building under your administration. Troubleshooting is a systematic process of finding and resolving problems or issues in a network or a system. Troubleshooting usually follows a general methodology that consists of several steps or phases, such as:

• Identifying the problem: This step involves defining and describing the problem clearly and accurately based on the symptoms and evidence observed or reported by users or administrators. For example, in this case, the problem is that three individuals have reported poor wireless connections on the third floor of a building.
• Discovering the scale of the problem: This step involves determining how widespread and severe the problem is by gathering more information anddata from different sources and perspectives. For example, in this case, this step could involve checking if other users or devices on the third floor or other floors are experiencing similar issues, verifying if there are any changes or updates in the network configuration or environment that could affect the wireless connections, testing if there are any differences in performance or quality between different access points or channels on the third floor, etc.
• Performing corrective actions: This step involves applying possible solutions or fixes to resolve or mitigate the problem based on logical reasoning and analysis. For example, in this case, this step could involve adjusting the output power or channel assignment of the access points on the third floor, relocating or reorienting some access points or antennas to improve coverage or reduce interference, updating or replacing some faulty or outdated hardware or software components, etc.
• Verifying the solution: This step involves confirming that the problem is solved or improved by testing and monitoring the network performance and user satisfaction after applying corrective actions. For example, in this case, this step could involve measuring and comparing the signal strength and throughput of wireless connections on the third floor before and after performing corrective actions, asking for feedback from users who reported poor wireless connections to see if their issues are resolved or reduced, etc.
• Creating a plan of action or escalating the problem: This step involves documenting and reporting the problem and its solution for future reference and improvement purposes. It also involves deciding whether to close or escalate the problem depending on its status and severity. For example, in this case, this step could involve creating a report that summarizes what was done to troubleshoot and fix poor wireless connections on the third floor with relevant data and evidence to support it. It could also involve escalating poor wireless connections to higher-level administrators if they persist or worsen despite performing corrective actions.

References: 1, Chapter 12, page

The BSSID (Basic Service Set Identifier) is typically mapped to an AP’s MAC address if a single BSS is implemented. The BSSID is a unique identifier that distinguishes one BSS from another within the same RF medium. It is usually derived from the MAC address of the AP’s radio interface, but it can also be manually configured or randomly generated by some vendors. The BSSID is used by client stations to associate with an AP and to send and receive frames within a BSS. References: , Chapter 1, page 24; , Section 1.2

When performing a post-deployment validation survey for voice over Wi-Fi (VoWiFi), an action that must be performed is Application analysis with an active phone call on a VoWiFi handset. Application analysis is a method of testing the performance of a specific application over the WLAN by measuring parameters such as throughput, latency, jitter, packet loss, MOS score, and R-value. Application analysis with an active phone call on a VoWiFi handset can help to evaluate the quality of service (QoS) and user experience of VoWiFi calls over the WLAN. It can also help to identify any issues or bottlenecks that may affect VoWiFi calls such as interference, roaming delays, or insufficient coverage. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 549; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 519.

The factors that will have the most significant impact on the amount of wireless bandwidth available to each station within a BSS are:

• The number of client stations associated to the BSS
• The presence of co-located (10m away) access points on non-overlapping channels

The number of client stations associated to the BSS affects the wireless bandwidth because each station shares the same channel and medium with other stations in the same BSS. The more stations there are, the more contention and collision there will be for the channel access, which reduces thethroughput and efficiency of the wireless communication. The wireless bandwidth available to each station depends on how the access point allocates the channel resources and how the stations use the channel time. For example, if the access point uses a round-robin scheduling algorithm, each station will get an equal share of the channel time regardless of its data rate or traffic demand. However, if the access point uses a proportional fair scheduling algorithm, each station will get a share of the channel time that is proportional to its data rate and traffic demand, which may result in higher or lower bandwidth for different stations.

The presence of co-located (10m away) access points on non-overlapping channels affects the wireless bandwidth because even though they use different channels, they may still cause interference and noise to each other due to channel leakage or imperfect filtering. The interference and noise can degrade the signal quality and SNR of the wireless communication, which reduces the data rate and throughput of the wireless communication. The wireless bandwidth available to each station depends on how well the access point and the station can cope with the interference and noise from other channels. For example, if the access point and the station support dynamic frequency selection (DFS) or adaptive radio management (ARM), they can switch to a less congested channel or adjust their output power or antenna gain to avoid or minimize interference from other channels.

References:1, Chapter 3, page 94;2, Section 3.2

Impedance is the measure of opposition to the flow of alternating current (AC) in a circuit. Impedance mismatch occurs when the impedance of the radio does not match the impedance of the antenna or the cable. This causes some of the transmitted or received signal to be reflected back, resulting in a loss of power and efficiency. The voltage standing wave ratio (VSWR) is a metric that indicates the amount of impedance mismatch in a transmission line. A higher VSWR means a higher impedance mismatch and a lower signal quality. A VSWR of 1:1 is ideal, meaning there is no impedance mismatch and no reflected power. A VSWR of 2:1 means that for every 2 units of forward power, there is 1 unit of reflected power12.

The other options are not correct because they do not affect the VSWR in RF cables. A high gain yagi antenna or a high gain parabolic dish antenna can increase the signal strength and directionality, but they do not cause impedance mismatch in the cable. Radio output power above 100 mW but below 400 mW is within the acceptable range for most WLAN devices and does not cause excessive VSWR in the cable3.

References: 1:CWNA-109Official Study Guide, page 77 2: VSWR 3:CWNA-109Official Study Guide, page 81

 VSWR stands for Voltage Standing Wave Ratio, which is a measure of how well the impedance of the RF cable and connectors matches the impedance of the transmitter and the antenna. Impedance is the opposition to the flow of alternating current in an RF circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. A perfect impedance match would have a VSWR of 1:1, meaning that all the power is transferred from the transmitter to the antenna, and none is reflected back. However, in reality, there is always some degree of mismatch, which causes some power to be reflected back to the transmitter, creating standing waves along the cable. This reduces the efficiency and performance of the wireless system, and can also damage the transmitter. Excessive VSWR can be caused by using poor quality or damaged cables and connectors, or by using components that have different impedance ratings123. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 90; CWNA-109Study Guide, Chapter 2: Radio Frequency Fundamentals, page 86; CWNP website, CWNA Certification.

A high-density deployment is a wireless network that is designed to support a large number of users and devices in a relatively small area. This type of deployment is often used in enterprise environments, such as offices, schools, and hospitals.

The use of semi-directional antennas in the deployment described in the question is a good indication that it is a high-density deployment. Semi-directional antennas can be used to focus the signal from an access point in a specific direction. This can help to reduce interference and improve performance in high-density environments.

The other answer choices are less likely to be correct for the following reasons:

• SOHO (small office/home office) deployments are typically smaller and less complex than high-density deployments.
• Residential deployments are typically even smaller and less complex than SOHO deployments.
• Standard office deployments may be high-density, but they may also be lower-density.

It is important to note that the type of deployment is not determined solely by the output power of the access points. However, the use of 10 mW of output power on the 2.4 GHz radios and 20 mW of output power on the 5GHz radios is also consistent with a high-density deployment.

Here are some additional tips for deploying a high-density wireless network:

• Use a site survey to determine the optimal placement of access points.
• Configure the access points to use non-overlapping channels.
• Use semi-directional or directional antennas to focus the signal and reduce interference.
• Implement a wireless intrusion prevention system (WIPS) to detect and mitigate rogue access points and other security threats.

In the 802.11ax (High Efficiency, HE) amendment, one of the key features introduced is BSS (Basic Service Set) Coloring. This feature is designed to mitigate issues arising from overlapping BSSs (OBSS), which can lead to contention and interference in dense wireless environments. BSS Coloring works by:

• Assigning a "color" (a small number) to each BSS: This helps devices differentiate between frames from their own BSS and those from neighboring BSSs.
• Reducing Inter-BSS Interference: Devices can ignore frames from different BSSs (with a different "color") under certain conditions, reducing the impact of OBSS interference.
• Improving Spatial Reuse: By distinguishing between transmissions from different BSSs, devices can make more informed decisions about when to transmit, improving the efficiency of spatial reuse and reducing unnecessary contention.

This feature directly impacts design decisions related to AP placement and the spacing between same-channel BSS cells, as it allows for closer placement of APs on the same channel without significantly increasing interference, thus improving overall network capacity and efficiency.

The other options, while features of 802.11ax, do not directly pertain to reducing overlapping BSS contention in the same manner:

• TWT (Target Wake Time)optimizes device sleep schedules to conserve power.
• Uplink MU-MIMOenhances uplink data transmission capabilities but doesn't specifically address OBSS contention.
• 6 GHz Band Supportintroduces new spectrum for Wi-Fi use but is not a feature aimed at reducing OBSS contention within the 802.11ax framework.

Therefore, the correct answer is B, BSS Color.

References:

• IEEE 802.11ax-2021: Enhancements for High Efficiency WLAN.
• CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.

The client drivers are faulty and should be upgraded is the likely problem for the laptop that can see and connect to 2.4 GHz APs, but does not even see 5 GHz APs. The client drivers are the software components that enable the wireless adapter of the laptop to communicate with the operating system and the network. The client drivers are responsible for scanning the available wireless channels, detecting and connecting to the access points, negotiating the security and data rate parameters, and transmitting and receiving data frames. If the client drivers are faulty, outdated, or incompatible, they may cause various issues with the wireless performance and functionality, such as low data rates, poor signal strength, frequent disconnections, or inability to see or connect to certain access points or channels.

One of the possible causes of faulty client drivers is that they do not support or recognize some of the features or standards of the 802.11ac technology, such as wider channel bandwidths, higher modulation schemes, or DFS (Dynamic Frequency Selection) channels. This could explain why the laptop can see and connect to 2.4 GHz APs, but not 5 GHz APs, as 802.11ac operates only in the 5 GHz band and uses channels that are wider (up to 160 MHz) and higher (up to channel 165) than those used by previous standards. Moreover, some of the 5 GHz channels are subject to DFS rules, which require the access points and client stations to monitor and avoid using channels that are occupied by radar systems or other primary users. If the client drivers do not support or comply with DFS rules, they may not be able to see or connect to access points that use DFS channels.

To solve this problem, the client drivers should be upgraded to the latest version that supports and is compatible with 802.11ac features and standards. This can be done by downloading and installing the updated driver software from the manufacturer’s website or using a device manager tool. Upgrading the client drivers may also improve other aspects of wireless performance and functionality, such as data rates, signal strength, security, and stability. References: 1, Chapter 12, page 493; 2, Section 8.1