CWNA-109 Certified Wireless Network Administrator Questions and Answers

An immediate concern that you note after hearing this information is that the power budget in the edge switches must be carefully planned and monitored based on the number of supported PoE devices. PoE stands for Power over Ethernet and is a technology that allows Ethernet switches to deliver power along with data to devices such as VoIP phones and 802.11 access points. PoE devices are classified into different classes based on their power consumption and output. The edge switches have a limited power budget that determines how many PoE devices they can support simultaneously. If the power budget is exceeded, some PoE devices may not receive enough power or may shut down unexpectedly. Therefore, it is important to plan and monitor the power budget in the edge switches based on the number and class of PoE devices connected to them. Using Ether-channel, placing switches in optimal locations, or avoiding distortion are not immediate concerns related to PoE devices. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 234; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 224.

OFDM is a modulation method that divides the channel bandwidth into multiple subcarriers, each carrying a single data symbol. This allows for higher data rates and more robust transmissions in multipath environments. OFDM was first introduced in the 802.11a standard, which operates in the 5 GHz band and supports data rates up to 54 Mbps. Later, the 802.11g standard adopted OFDM for the 2.4 GHz band, and the 802.11n and 802.11ac standards enhanced OFDM with features such as MIMO (Multiple Input Multiple Output), channel bonding, and higher-order modulation schemes to achieve data rates up to 600 Mbps and 6.9 Gbps, respectively. These standards are collectively known as the ERP (Extended Rate PHY), HT (High Throughput), and VHT (Very High Throughput) PHYs . References: [CWNA-109 Study Guide], Chapter 4: Radio Frequency Signal and Antenna Concepts, page 163; [CWNA-109 Study Guide], Chapter 4: Radio Frequency Signal and Antenna Concepts, page 157.

An IEEE 802.11 amendment is a proposed change or addition to the existing 802.11 standard, which defines the specifications and protocols for wireless LANs. An amendment goes through several stages of development, such as draft, sponsor ballot, and final approval, before it is ratified by the IEEE Standards Association and becomes part of the standard. Until then, it has no official impact on the standard, although some vendors may release products based on draft amendments to gain a competitive edge or to influence the final outcome of the amendment . References: [CWNA-109 Study Guide], Chapter 1: Overview of Wireless Standards, Organizations, and Fundamentals, page 25; [CWNA-109 Study Guide], Chapter 1: Overview of Wireless Standards, Organizations, and Fundamentals, page 23; [IEEE website], IEEE-SA Standards Development Process.

S1G is one of the 802.11 PHYs that is more likely to be used in an industrial deployment but not likely to be used in standard office deployments. This is because S1G stands for Sub-1 GHz, which means it operates in the frequency bands below 1 GHz, such as 900 MHz and 868 MHz. These bands offer better penetration and range than the higher frequency bands used by other 802.11 PHYs, such as 2.4 GHz and 5 GHz. This makes S1G suitable for industrial applications that require robust and reliable wireless communication in harsh environments, such as factories, warehouses, mines, and smart grids. S1G also supports low-power and low-data-rate devices, such as sensors, actuators, and meters, which are common in industrial Internet of Things (IoT) scenarios. VHT, OFDM, and HT are other 802.11 PHYs that are more commonly used in standard office deployments, as they offer higher data rates and capacity than S1G, but have lower range and penetration. References: CWNA-109 Study Guide, Chapter 3: Radio Frequency Technologies, page 751

The IEEE 802.11ax standard, also known as High-Efficiency Wireless (HEW) or simply HE, includes support for operation across multiple frequency bands: 2.4 GHz, 5 GHz, and, with the appropriate regulatory approvals, the 6 GHz band. This makes option D the correct answer. Here's how it compares to the other options:

HE (802.11ax): Introduced as an enhancement over previous standards, 802.11ax is designed to improve efficiency, especially in dense environments. It supports operation in the 2.4 GHz, 5 GHz, and 6 GHz bands (the latter pending regulatory approval in various regions), making it highly versatile and future-proof.

VHT (802.11ac): Very High Throughput, or 802.11ac, operates exclusively in the 5 GHz band. It introduced significant speed improvements over its predecessor (802.11n) but does not support the 2.4 GHz or 6 GHz bands.

HT (802.11n): High Throughput, or 802.11n, supports operation in both the 2.4 GHz and 5 GHz bands. However, it does not include support for the 6 GHz band.

HR/DSSS (802.11b): High-Rate Direct Sequence Spread Spectrum, or 802.11b, operates only in the 2.4 GHz band. It was one of the early Wi-Fi standards and does not support 5 GHz or 6 GHz bands.

Given these distinctions, only 802.11ax (option D) supports operation across all three mentioned bands, aligning with the requirements stated in the question.

The CWNA Official Study Guide (CWNA-109), Chapter 8: Troubleshooting and Spectrum Analysis, explains that hidden node problems occur when two or more client stations cannot hear each other but can both communicate with the same access point. This leads to collisions at the AP because the clients transmit simultaneously without sensing each other’s signals.

“Hidden node problems can often be identified in a protocol analyzer by observing excessive retransmissions from specific client stations. These retransmissions occur because the station’s frames are not acknowledged due to collisions caused by other stations that the transmitter cannot hear.”

— CWNA-108 Study Guide, Chapter 8, Hidden Node Problem Analysis, p. 393–395

Therefore, when analyzing for a hidden node issue, you will typically observe:

Retransmitted frames from multiple STAs.

Higher retry counts for affected stations compared to others.

Hence, the correct answer is C. Retransmitted frames from multiple STAs with higher retry counts than other STAs.

“Effective, or Equivalent Isotropically Radiated Power (EIRP) is the maximum amount of power that could be radiated from an antenna, given its antenna gain and the transmitter power of the RF system.”

Also: “Effective Isotropic Radiated Power or Equivalent Isotropic Radiated Power (EIRP) is the measured power radiated in a single direction by an ideal isotropic antenna. … It is the antenna’s maximum power output in the direction with the highest antenna gain.”

The unit of measurement that is an absolute unit and is used to quantify received signal power levels on a logarithmic scale is dBm. dBm stands for decibel-milliwatt and represents the power level relative to 1 milliwatt (mW). dBm is an absolute unit because it has a fixed reference point and does not depend on the input power level. dBm is used to measure the received signal power levels on a logarithmic scale because it can express large variations in power levels with small numbers and make calculations easier. For example, a 10 dB increase in power level means a 10-fold increase in power, and a 20 dB increase means a 100-fold increase in power. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 66; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 56.

Implementing Fast BSS Transition (FT) for roaming is likely to cause the least impact on the application layer throughput of an 802.11n client station in a 2.4 GHz HT BSS. FT is a feature that allows a client station to quickly switch from one AP to another within the same ESS (Extended Service Set) without having to re-authenticate and re-associate with each AP. This reduces the latency and packet loss that may occur during roaming, thus improving the user experience and maintaining the application layer throughput. FT is defined in the IEEE 802.11r amendment and is also known as Fast Roaming or Fast Secure Roaming. References: , Chapter 9, page 367; , Section 6.3

Weak signal strength is the likely cause of the low data rate issue for the client that has a signal strength of -84 dBm and a noise floor of -96 dBm. The client is an 802.11ac client and connects to an 802.11ac AP. Both the client and AP are 2x2:2 devices. Signal strength is the measure of how strong the RF signal is at the receiver. Signal strength can affect the reliability and performance of the wireless connection, as well as the data rate and throughput of the traffic. The higher the signal strength, the better the signal quality and the higher the data rate. The lower the signal strength, the worse the signal quality and the lower the data rate.

The data rate of an 802.11ac connection depends on several factors, such as channel bandwidth, modulation and coding scheme (MCS), spatial streams, guard interval, and beamforming. However, these factors are also influenced by the signal strength, as they require a certain signal-to-noise ratio (SNR) to operate properly. SNR is the ratio of the signal strength to the noise floor, which is the measure of the background noise or interference in the RF environment. The higher the SNR, the more robust and efficient the communication. The lower the SNR, the more prone and vulnerable to errors and retries.

According to the CWNA Official Study Guide , Table 3.7, page 112, an 802.11ac connection with a channel bandwidth of 80 MHz, an MCS of 9, two spatial streams, a short guard interval, and no beamforming can achieve a maximum data rate of 867 Mbps. However, this data rate requires a minimum SNR of 30 dB to maintain a sufficient signal quality. If the signal strength is -84 dBm and the noise floor is -96 dBm, then the SNR is only 12 dB (-84 dBm - (-96 dBm) = 12 dB), which is far below the required SNR for this data rate. Therefore, the data rate will drop significantly to match the lower SNR and signal quality.

To solve this problem, the signal strength should be increased to improve the SNR and data rate. This can be done by adjusting the output power or channel assignment of the AP or client, relocating or reorienting some APs or antennas to reduce attenuation or interference, updating or replacing some faulty or outdated hardware or software components, etc. References: , Chapter 3, page 112; , Section 3.2

A high-density deployment is a wireless network that is designed to support a large number of users and devices in a relatively small area. This type of deployment is often used in enterprise environments, such as offices, schools, and hospitals.

The use of semi-directional antennas in the deployment described in the question is a good indication that it is a high-density deployment. Semi-directional antennas can be used to focus the signal from an access point in a specific direction. This can help to reduce interference and improve performance in high-density environments.

The other answer choices are less likely to be correct for the following reasons:

SOHO (small office/home office) deployments are typically smaller and less complex than high-density deployments.

Residential deployments are typically even smaller and less complex than SOHO deployments.

Standard office deployments may be high-density, but they may also be lower-density.

It is important to note that the type of deployment is not determined solely by the output power of the access points. However, the use of 10 mW of output power on the 2.4 GHz radios and 20 mW of output power on the 5GHz radios is also consistent with a high-density deployment.

Here are some additional tips for deploying a high-density wireless network:

Use a site survey to determine the optimal placement of access points.

Configure the access points to use non-overlapping channels.

Use semi-directional or directional antennas to focus the signal and reduce interference.

Implement a wireless intrusion prevention system (WIPS) to detect and mitigate rogue access points and other security threats.

A laptop-based spectrum analyzer with a directional antenna is the best solution for locating a non-802.11 device that is suspected of causing interference on the WLAN. A spectrum analyzer is a device or a software application that can measure and display the frequency spectrum of electromagnetic signals in a given range. A spectrum analyzer can show the amplitude, frequency, bandwidth, modulation, and other characteristics of different signals in the spectrum, which can help identify their sources and types. A spectrum analyzer can also detect non-802.11 devices that may cause interference on the WLAN, such as microwave ovens, cordless phones, Bluetooth devices, or radar systems. A laptop-based spectrum analyzer is a software application that runs on a laptop computer and uses an external USB adapter as its RF interface. A laptop-based spectrum analyzer has the advantage of being portable, flexible, and cost-effective compared to a hardware-based spectrum analyzer. A directional antenna is an antenna that radiates or receives RF signals more strongly in one direction than in others. A directional antenna has a high gain and a narrow beamwidth, which means it can focus the RF energy in a specific direction and reduce the interference from other directions. A directional antenna can also increase the range and sensitivity of the RF signal detection. To locate a non-802.11 device that is causing interference on the WLAN, a laptop-based spectrum analyzer with a directional antenna can be used to perform a technique called RF hunting or triangulation. This technique involves pointing the directional antenna in different directions and observing the signal strength and characteristics of the interfering device on the spectrum analyzer. By moving around and changing the direction of the antenna, the location of the interfering device can be estimated based on where the signal strength is highest and most consistent. References: 1, Chapter 7, page 282; 2, Section 4.3

802.11 QoS is achieved by giving high priority queues a statistical advantage at winning contention. 802.11 QoS is based on the Enhanced Distributed Channel Access (EDCA) mechanism, which defines four access categories (ACs) for different types of traffic: Voice, Video, Best Effort, and Background. Each AC has its own transmit queue and contention parameters, such as Arbitration Interframe Space (AIFS), Contention Window (CW), and Transmission Opportunity (TXOP). These parameters determine how long a station has to wait before transmitting a frame and how long it can occupy the channel. Higher priority ACs have shorter AIFS, smaller CW, and longer TXOP, which means they have more chances to access the channel and send more data than lower priority ACs. However, this does not guarantee that higher priority ACs will always win the contention, as there is still a random backoff process involved. Therefore, 802.11 QoS is a statistical service that provides different levels of service quality based on traffic categories. References: , Chapter 10, page 403; , Section 6.1

VHT stands for Very High Throughput, which is a physical layer (PHY) specification that supports the 5 GHz frequency band and supports 80 MHz channels. VHT is used by the IEEE 802.11ac standard, which is also known as Wi-Fi 5. VHT allows for higher data rates and more spatial streams than the previous HT (High Throughput) PHY, which is used by the IEEE 802.11n standard, also known as Wi-Fi 4. HT supports the 2.4 GHz and 5 GHz bands, but only supports up to 40 MHz channels12

The other options are not correct because:

ERP (option C) stands for Extended Rate PHY, which is a physical layer specification that supports the 2.4 GHz frequency band and supports up to 20 MHz channels. ERP is used by the IEEE 802.11g standard, which is also known as Wi-Fi 3. ERP allows for higher data rates than the previous DSSS (Direct Sequence Spread Spectrum) PHY, which is used by the IEEE 802.11b standard, also known as Wi-Fi 234

OFDM (option D) stands for Orthogonal Frequency Division Multiplexing, which is a modulation technique that divides a signal into multiple subcarriers that are spaced orthogonally to each other. OFDM is not a physical layer specification, but a common feature of many PHY specifications, including ERP, HT, and VHT. OFDM allows for higher spectral efficiency and robustness against multipath interference than the previous CCK (Complementary Code Keying) modulation technique used by DSSS34

Patch and panel antennas are directional antenna types that are commonly used by indoor Wi-Fi devices in a MIMO multiple spatial stream implementation. These antennas have a flat rectangular shape and can be mounted on walls or ceilings to provide coverage in a specific direction. They have a moderate gain and a relatively wide beamwidth, making them suitable for multipath environments where signals can reflect off different surfaces and create multiple spatial streams. Patch and panel antennas can also support polarization diversity, which means they can transmit and receive both horizontally and vertically polarized waves, increasing the MIMO performance. References: 1, Chapter 2, page 72; 2, Section 2.4

a mesh portal is a device that connects a mesh BSS (MBSS) to an Ethernet network, such as the Internet. A mesh portal acts as a bridge between the wired and wireless domains, and allows the mesh stations to communicate with external networks. A mesh portal is also a mesh point, which means it can forward traffic within the MBSS.

The other options are not correct. Option A. Mesh Gate is a device that connects a mesh BSS (MBSS) to another mesh BSS or another wireless network, such as an infrastructure BSS or an ad hoc network2. A mesh gate acts as a gateway between different wireless domains, and allows the mesh stations to communicate with other wireless networks. A mesh gate is also a mesh point, which means it can forward traffic within the MBSS. Option B. Mesh Switch is not a valid term in the 802.11 standard. Option C. Mesh Router is also not a valid term in the 802.11 standard.

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 289.

The term used to describe the problem in this configuration is Co-Channel Interference (CCI)1. CCI occurs when multiple access points are on the same or overlapping channels, causing interference and degradation in network performance1. In this case, one AP is on channel 1 and the other is on channel 2, which are overlapping channels, leading to CCI1.

MU-MIMO capabilities of the bridges are not a factor considered when calculating the Link Budget for an outdoor point-to-point WLAN bridge link. The Link Budget is a calculation of the expected signal strength at the receiver based on various factors that affect the RF transmission. Some of these factors are operating frequency, transmit power, receive antenna gain, free space path loss, cable loss, connector loss, and environmental loss. MU-MIMO stands for Multi-User Multiple Input Multiple Output, which is a technology that allows multiple devices to communicate simultaneously using multiple spatial streams. MU-MIMO is not relevant for a point-to-point link, where there are only two devices involved. References: 1, Chapter 2, page 59; 2, Section 2.2

The client drivers are faulty and should be upgraded is the likely problem for the laptop that can see and connect to 2.4 GHz APs, but does not even see 5 GHz APs. The client drivers are the software components that enable the wireless adapter of the laptop to communicate with the operating system and the network. The client drivers are responsible for scanning the available wireless channels, detecting and connecting to the access points, negotiating the security and data rate parameters, and transmitting and receiving data frames. If the client drivers are faulty, outdated, or incompatible, they may cause various issues with the wireless performance and functionality, such as low data rates, poor signal strength, frequent disconnections, or inability to see or connect to certain access points or channels.

One of the possible causes of faulty client drivers is that they do not support or recognize some of the features or standards of the 802.11ac technology, such as wider channel bandwidths, higher modulation schemes, or DFS (Dynamic Frequency Selection) channels. This could explain why the laptop can see and connect to 2.4 GHz APs, but not 5 GHz APs, as 802.11ac operates only in the 5 GHz band and uses channels that are wider (up to 160 MHz) and higher (up to channel 165) than those used by previous standards. Moreover, some of the 5 GHz channels are subject to DFS rules, which require the access points and client stations to monitor and avoid using channels that are occupied by radar systems or other primary users. If the client drivers do not support or comply with DFS rules, they may not be able to see or connect to access points that use DFS channels.

To solve this problem, the client drivers should be upgraded to the latest version that supports and is compatible with 802.11ac features and standards. This can be done by downloading and installing the updated driver software from the manufacturer’s website or using a device manager tool. Upgrading the client drivers may also improve other aspects of wireless performance and functionality, such as data rates, signal strength, security, and stability. References: 1, Chapter 12, page 493; 2, Section 8.1

Impedance is the measure of opposition to the flow of alternating current (AC) in a circuit. Impedance mismatch occurs when the impedance of the radio does not match the impedance of the antenna or the cable. This causes some of the transmitted or received signal to be reflected back, resulting in a loss of power and efficiency. The voltage standing wave ratio (VSWR) is a metric that indicates the amount of impedance mismatch in a transmission line. A higher VSWR means a higher impedance mismatch and a lower signal quality. A VSWR of 1:1 is ideal, meaning there is no impedance mismatch and no reflected power. A VSWR of 2:1 means that for every 2 units of forward power, there is 1 unit of reflected power12.

The other options are not correct because they do not affect the VSWR in RF cables. A high gain yagi antenna or a high gain parabolic dish antenna can increase the signal strength and directionality, but they do not cause impedance mismatch in the cable. Radio output power above 100 mW but below 400 mW is within the acceptable range for most WLAN devices and does not cause excessive VSWR in the cable3.

 This is because the passphrase for WPA2-Personal is case-sensitive and must match exactly on both the AP and the client. If the passphrase is entered incorrectly on the client, the client will not be able to authenticate with the AP and connect to the network. The AP that covers the problem area is not likely to require a firmware update, fail, or be improperly configured, as it is online and works with other clients that have the correct passphrase. To troubleshoot this issue, you can check the passphrase settings on the clients and make sure they match with the AP. You can also try to reconnect the clients to the network or reboot them if necessary. For more information on how to configure WPA2-Personal on your router

The inverse square law states that the signal strength of an RF wave is inversely proportional to the square of the distance from the source. This means that as the distance from the transmitter increases, the signal strength decreases rapidly.

PoE stands for Power over Ethernet, which is a technology that allows network devices to receive power and data over the same Ethernet cable. PoE eliminates the need for separate power adapters or outlets for devices such as IP phones, cameras, or APs. PoE requires two types of devices: PSE (Power Sourcing Equipment) and PD (Powered Device). A PSE is a device that provides power to the Ethernet cable, such as a switch, injector, or splitter. A PD is a device that receives power from the Ethernet cable, such as an IP phone, camera, or AP. When implementing PoE, a switch plays the role of a PSE910. References: CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 293; CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 287.

The client STA can use Beacon frames transmitted by the AP to verify that an AP supports the same data rates that it supports. Beacon frames are management frames that are periodically broadcasted by the APs to announce their presence, capabilities, and parameters. One of the information elements contained in the Beacon frames is the Supported Rates or Extended Supported Rates, which lists the data rates that the AP can use for communication. The client STA can compare its own data rates with those advertised by the AP to determine if they are compatible. Data frames, authentication frames, and probe request frames do not contain information about data rates. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 133; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 123.

VHT TXOP (Very High Throughput Transmit Opportunity) power save is a feature introduced with the 802.11ac amendment, which is designed to improve the power efficiency of devices connected to a WLAN. This feature enhances battery life in several ways, compared to the legacy Power Save mode:

Enhanced Power Saving: VHT TXOP power save allows devices to disable more components of the WLAN transceiver when they are in a low power state. This reduces the power consumption during periods when the device is not actively transmitting or receiving data.

Intelligent Wake-Up Mechanisms: It employs more sophisticated mechanisms for devices to determine when they need to wake up and listen to the channel, further reducing unnecessary power usage.

Optimized Operation: This power save mode is optimized for the high-throughput environment of 802.11ac networks, allowing devices to efficiently manage power while maintaining high performance.

Legacy Power Save mode, introduced in earlier versions of the 802.11 standards, does not provide the same level of component disablement or the intelligent wake-up mechanisms found in VHT TXOP power save, making option B the correct answer.

The likely problem that causes this scenario is faulty drivers. Drivers are software components that enable the communication between the operating system and the hardware devices, such as the wireless adapters. Faulty drivers can cause various issues with the wireless connectivity, such as not detecting or connecting to certain networks, dropping connections, or reducing performance. Faulty drivers can be caused by corrupted files, outdated versions, incompatible settings, or hardware defects. To fix faulty drivers, you can try to update, reinstall, or roll back the drivers, or contact the manufacturer for support. Interference from non-Wi-Fi sources, DoS attack, or interference from other WLANs are not likely to cause this scenario, as they would affect all devices in the same area, not just the new laptops. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 562; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 532.

A VoIP phone is least likely to be a POE PSE of the devices listed. POE stands for Power over Ethernet, which is a technology that allows devices to receive both power and data over a single Ethernet cable. A POE PSE stands for Power Sourcing Equipment, which is a device that provides power to other devices over Ethernet. A POE PD stands for Powered Device, which is a device that receives power from a PSE over Ethernet. A midspan multi-port injector, a switch, and a midspan injector are examples of POE PSEs, as they can supply power to multiple devices over Ethernet cables. A VoIP phone is an example of a POE PD, as it can receive power from a PSE over an Ethernet cable. However, some VoIP phones can also act as POE PSEs for other devices, such as IP cameras or wireless access points, but this is not very common. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2411

Granting access to specific network services or resources according to a user profile describes the authorization component of a AAA implementation. AAA stands for Authentication, Authorization, and Accounting, which are three functions that are used to control and monitor access to network resources and services. Authentication is the process of verifying that a user is who he says he is, by using credentials such as username, password, certificate, token, or biometric data. Authorization is the process of granting access to specific network services or resources according to a user profile, which defines the user’s role, privileges, and permissions. Accounting is the process of recording and reporting the usage of network services or resources by a user, such as the duration, volume, type, and location of the access. AAA can be implemented by using different protocols and servers, such as RADIUS, TACACS+, LDAP, Kerberos, or Active Directory. References: 1, Chapter 11, page 449; 2, Section 7.1

The response that you should give to your manager’s suggestion of implementing the security practices of disabling the broadcasting of the SSID in Beacons and configuring the access points not to respond to Probe Request frames that have a null SSID field is that any 802.11 protocol analyzer can see the SSID in clear text in frames other than Beacons frames. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames. The SSID (Service Set Identifier) is a human-readable name that identifies a WLAN and allows users to connect to it. The SSID is transmitted in clear text in several types of 802.11 frames, such as Beacon frames, Probe Request frames, Probe Response frames, Association Request frames, Association Response frames, Reassociation Request frames, and Reassociation Response frames. Some people may think that hiding the SSID can improve the security of the WLAN by making it invisible to potential intruders. However, this is not true, as hiding the SSID only removes it from Beacon frames and Probe Response frames that have a null SSID field. The SSID is still present in other types of frames that can be easily captured and analyzed by any 802.11 protocol analyzer or wireless scanner tool. Therefore, hiding the SSID does not provide any real security benefit and may even cause some compatibility and performance issues for legitimate users. References: 1, Chapter 4, page 133; 2, Section 4.1

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchange protocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 297.

The statement that in modern networks, both centralized and distributed data forwarding work well for most standard office deployments is true about WLAN performance. Data forwarding refers to how wireless frames are transmitted from wireless clients to wired networks or vice versa through wireless access points (APs). Centralized data forwarding means that all wireless frames are sent to a central controller or gateway before being forwarded to their destinations. Distributed data forwarding means that wireless frames are forwarded directly by the APs to their destinations without going through a central controller or gateway. Both methods have their advantages and disadvantages, depending on the network size, topology, traffic pattern, security, and management requirements. However, in modern networks, both methods can achieve high performance and scalability for most standard office deployments, as they can leverage advanced features such as fast roaming, load balancing, quality of service, and encryption. The other statements about WLAN performance are false. In most WLANs, special skill or tuning is required to get peak performance, such as selecting the appropriate channel, power, data rate, and antenna settings. WLANs perform worse as more wireless clients connect with each AP, as they cause more contention and interference on the wireless medium. To get the best performance out of an AP, you should not disable data rates of 72 Mbps and lower, as they are needed for backward compatibility and range extension. References: CWNA-109 Study Guide, Chapter 9: Wireless LAN Architecture, page 2811

 The data rate of a signal is the speed that the data bits in individual 802.11 data frames are sent, but it does not account for the actual amount of data that can be transmitted over time. The throughput of a connection is the flow of information over time, which is affected by various factors such as data encoding, modulation, encryption, airtime utilization, noise levels, interference, etc. Therefore, the throughput is always lower than the data rate. According to one of the web search results1, the actual throughput is normally 60-70 percent of the supported data rates. So, for a connection with a data rate of 150 Mbps, the expected throughput would be around 90-105 Mbps.

The common spectrum analyzer view that you should use for this analysis is the Waterfall/Spectrogram view. The Waterfall/Spectrogram view shows the signal from the interfering device over time on a three-dimensional graph. The x-axis represents frequency, the y-axis represents time, and the z-axis represents amplitude or power. The color of each pixel indicates the signal strength at a given frequency and time. The Waterfall/Spectrogram view can help you identify the characteristics of the interference source, such as its frequency range, duty cycle, modulation type, and pattern. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 524; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 494.