CWNA-109 Sample Questions Answers

The BSSID (Basic Service Set Identifier) is typically mapped to an AP’s MAC address if a single BSS is implemented. The BSSID is a unique identifier that distinguishes one BSS from another within the same RF medium. It is usually derived from the MAC address of the AP’s radio interface, but it can also be manually configured or randomly generated by some vendors. The BSSID is used by client stations to associate with an AP and to send and receive frames within a BSS. References: , Chapter 1, page 24; , Section 1.2

Elevators are a common building item that frequently causes RF shadow and must be accounted for in coverage plans. RF shadow is a term that describes an area where wireless signals are blocked or significantly weakened by an obstacle or an object that absorbs or reflects RF energy. RF shadow can cause lack of coverage or poor performance in a WLAN because wireless devices in those areas may not be able to communicate with access points or other devices. RF shadow can be mitigated by adjusting access point placement, antenna orientation, transmit power level, or channel selection to avoid or overcome the obstacle or object that causes it. Elevators are a common building item that frequently causes RF shadow because they are made of metal and they move up and down within a shaft. Metal is a material that has high attenuation and reflection values, which means it can block or bounce off wireless signals very effectively. A moving elevator can create dynamic RF shadow that changes depending on its position and direction. Therefore, elevators must be accounted for in coverage plans to ensure adequate WLAN coverage and performance throughout the facility. The other options are not common building items that frequently cause RF shadow or must be accounted for in coverage plans. Wooden doors are not likely to cause RF shadow because they are made of wood, which is a material that has low attenuation and reflection values, which means it can pass through or slightly weaken wireless signals. Carpeted floors are not likely to cause RF shadow because they are made of fabric, which is a material that has low attenuation and reflection values, which means it can pass through or slightly weaken wireless signals. Cubicle partitions are not likely to cause RF shadow because they are made of thin plastic or cardboard, which are materials that have low attenuation and reflection values, which means they can pass through or slightly weaken wireless signals. References: CWNA-109 Study Guide, Chapter 13: Wireless LAN Site Surveys - Types & Processes , page 433

MU-MIMO capabilities of the bridges are not a factor considered when calculating the Link Budget for an outdoor point-to-point WLAN bridge link. The Link Budget is a calculation of the expected signal strength at the receiver based on various factors that affect the RF transmission. Some of these factors are operating frequency, transmit power, receive antenna gain, free space path loss, cable loss, connector loss, and environmental loss. MU-MIMO stands for Multi-User Multiple Input Multiple Output, which is a technology that allows multiple devices to communicate simultaneously using multiple spatial streams. MU-MIMO is not relevant for a point-to-point link, where there are only two devices involved. References: 1, Chapter 2, page 59; 2, Section 2.2

What prevents each station from using all the airtime when other client stations are actively communicating in the same BSS is CSMA/CA. CSMA/CA stands for Carrier Sense Multiple Access with Collision Avoidance and is a media access control method used by WLAN devices to share the wireless medium. CSMA/CA works by having each station sense the medium before transmitting a frame. If the medium is busy (i.e., another station is transmitting), the station defers its transmission until the medium is idle. If the medium is idle, the station waits for a random backoff period before transmitting. This way, CSMA/CA reduces the chances of collisions and ensures fair access to the medium for all stations. CSMA/CA also uses positive acknowledgements to confirm successful transmissions and retransmissions to recover from errors. CSMA/CD, DOS prevention, and OFDMA are not used by WLAN devices in a BSS. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 108; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 98.

CCI is still a possibility in this network because the client devices connected to one of the channel 1 APs will transmit frames that reach the other channel 1 AP as well as clients connected to the other channel 1 AP. CCI stands for co-channel interference, which is a type of interference that occurs when two or more devices transmit on the same channel within range of each other. CCI reduces performance and capacity because it causes contention and collisions on the wireless medium, which leads to retransmissions and delays. CCI can be mitigated by increasing physical separation between devices using the same channel or by reducing transmit power levels to limit coverage area. In this scenario, three access points are used within a facility. One access point is on channel 11 and the other two are on channel 1. The two access points using channel 1 are on either side of the access point using channel 11 and sufficiently apart so that they do not interfere with each other when they transmit frames. However, this does not prevent CCI from occurring between their client devices that are connected on channel 1. For example, if a client device connected to one of the channel 1 APs sends a frame to another device on the wired network or on another wireless network (such as an Internet server or a VoIP phone), that frame will be heard by both channel 1 APs as well as any other client devices connected to either of them on channel 1. This will cause CCI because these devices will have to wait for the channel to be clear before they can transmit their own frames. The answer that CCI only occurs in the 5 GHz frequency band is incorrect; CCI can occur in any frequency band where devices use the same channel. The answer that channel 11 loops around and causes CCI with channel 1 is also incorrect; channel 11 does not loop around and it operates in a different frequency band than channel 1. References: CWNA-109 Study Guide, Chapter 5: Radio Frequency Signal and Antenna Concepts, page 147

VHT stands for Very High Throughput, which is a physical layer (PHY) specification that supports the 5 GHz frequency band and supports 80 MHz channels. VHT is used by the IEEE 802.11ac standard, which is also known as Wi-Fi 5. VHT allows for higher data rates and more spatial streams than the previous HT (High Throughput) PHY, which is used by the IEEE 802.11n standard, also known as Wi-Fi 4. HT supports the 2.4 GHz and 5 GHz bands, but only supports up to 40 MHz channels12

The other options are not correct because:

ERP (option C) stands for Extended Rate PHY, which is a physical layer specification that supports the 2.4 GHz frequency band and supports up to 20 MHz channels. ERP is used by the IEEE 802.11g standard, which is also known as Wi-Fi 3. ERP allows for higher data rates than the previous DSSS (Direct Sequence Spread Spectrum) PHY, which is used by the IEEE 802.11b standard, also known as Wi-Fi 234

OFDM (option D) stands for Orthogonal Frequency Division Multiplexing, which is a modulation technique that divides a signal into multiple subcarriers that are spaced orthogonally to each other. OFDM is not a physical layer specification, but a common feature of many PHY specifications, including ERP, HT, and VHT. OFDM allows for higher spectral efficiency and robustness against multipath interference than the previous CCK (Complementary Code Keying) modulation technique used by DSSS34

 What you should tell him is that due to 802.11 network operations and the dynamic rates used by devices on the network, the two radios will likely not exceed the 1 Gbps Ethernet link. This is because the actual throughput of an 802.11 network is much lower than the theoretical data rates due to factors such as overhead, contention, interference, retransmissions, and environmental conditions. Moreover, the data rates used by devices on the network vary depending on their distance, signal quality, capabilities, and configuration. Therefore, it is unlikely that both radios of the AP will simultaneously use the maximum data rates and saturate the 1 Gbps Ethernet link. Upgrading to a 10 Gbps Ethernet link or running a second 1 Gbps Ethernet link may be unnecessary and costly. Compressing all data before transmitting it onto the Ethernet link may introduce additional overhead and latency. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 227; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 217.

Patch and panel antennas are directional antenna types that are commonly used by indoor Wi-Fi devices in a MIMO multiple spatial stream implementation. These antennas have a flat rectangular shape and can be mounted on walls or ceilings to provide coverage in a specific direction. They have a moderate gain and a relatively wide beamwidth, making them suitable for multipath environments where signals can reflect off different surfaces and create multiple spatial streams. Patch and panel antennas can also support polarization diversity, which means they can transmit and receive both horizontally and vertically polarized waves, increasing the MIMO performance. References: 1, Chapter 2, page 72; 2, Section 2.4

The client drivers are faulty and should be upgraded is the likely problem for the laptop that can see and connect to 2.4 GHz APs, but does not even see 5 GHz APs. The client drivers are the software components that enable the wireless adapter of the laptop to communicate with the operating system and the network. The client drivers are responsible for scanning the available wireless channels, detecting and connecting to the access points, negotiating the security and data rate parameters, and transmitting and receiving data frames. If the client drivers are faulty, outdated, or incompatible, they may cause various issues with the wireless performance and functionality, such as low data rates, poor signal strength, frequent disconnections, or inability to see or connect to certain access points or channels.

One of the possible causes of faulty client drivers is that they do not support or recognize some of the features or standards of the 802.11ac technology, such as wider channel bandwidths, higher modulation schemes, or DFS (Dynamic Frequency Selection) channels. This could explain why the laptop can see and connect to 2.4 GHz APs, but not 5 GHz APs, as 802.11ac operates only in the 5 GHz band and uses channels that are wider (up to 160 MHz) and higher (up to channel 165) than those used by previous standards. Moreover, some of the 5 GHz channels are subject to DFS rules, which require the access points and client stations to monitor and avoid using channels that are occupied by radar systems or other primary users. If the client drivers do not support or comply with DFS rules, they may not be able to see or connect to access points that use DFS channels.

To solve this problem, the client drivers should be upgraded to the latest version that supports and is compatible with 802.11ac features and standards. This can be done by downloading and installing the updated driver software from the manufacturer’s website or using a device manager tool. Upgrading the client drivers may also improve other aspects of wireless performance and functionality, such as data rates, signal strength, security, and stability. References: 1, Chapter 12, page 493; 2, Section 8.1

VoIP (Voice over Internet Protocol) is an application that is likely used that demands the requirements of unidirectional delays of less than 150 ms and the signal strength at all receivers can be no lower than -67 dBm. VoIP is an application that allows users to make and receive voice calls over a network, such as the Internet or a WLAN. VoIP is a real-time and interactive application that requires high quality of service (QoS) to ensure good user experience and satisfaction. One of the QoS metrics for VoIP is delay, which is the time it takes for a voice packet to travel from the sender to the receiver. Delay can affect the quality and intelligibility of the voice conversation, as well as the synchronization and naturalness of the dialogue. The ITU-T G.114 recommendation suggests that the maximum acceptable one-way delay for VoIP should be less than 150 ms, as anything higher than that can cause noticeable degradation and annoyance to the users. Another QoS metric for VoIP is signal strength, which is the measure of how strong the RF signal is at the receiver. Signal strength can affect the reliability and performance of the wireless connection, as well as the data rate and throughput of the VoIP traffic. The CWNA Official Study Guide recommends that the minimum signal strength for VoIP should be -67 dBm, as anything lower than that can cause packet loss, retries, jitter, and other issues that can impair the voice quality. References: 1, Chapter 10, page 398; 2, Section 6.1

https://7signal.com/802-11ac-migration-part-2-whats-nobodys-telling-you-about-80mhz-and-160mhz-channel-bonding

The clients are all 802.11n STAs or lower is the likely cause of this behavior. If a WLAN with 100 802.11ac access points is configured to use 80 MHz channels, but only 40 MHz communications are seen in a particular BSS, it means that the clients in that BSS do not support 80 MHz channels. This could be because they are using older standards, such as 802.11n or lower, that do not support 80 MHz channels. Alternatively, they could be using newer standards, such as 802.11ac or ax, but have their channel width settings limited to 40 MHz or lower due to device capabilities or configuration options. In either case, the AP will adapt to the client’s channel width and use only 40 MHz of the 80 MHz allocated bandwidth to communicate with them. This will reduce the potential throughput and efficiency of the WLAN. References: , Chapter 3, page 111; , Section 3.2

A pre-design site visit in preparation for a predictive wireless LAN design is essential for gathering physical and environmental data about the site. The key tasks to be performed during such a visit include:

Evaluating Building Materials: Different materials (concrete, glass, wood, etc.) have varying effects on RF signal propagation. Understanding the materials present helps in accurately predicting how signals will behave within the environment.

Floor Plan Verification: Ensuring that the floor plan documents are an accurate representation of the actual building layout is crucial. Discrepancies between the floor plans and the physical layout can lead to inaccuracies in the predictive design.

The other options, while potentially valuable in other contexts, are not directly related to preparing for a predictive design:

Installing APs (option A) for testing co-channel interference is more aligned with an active site survey rather than a pre-design visit for a predictive design.

Collecting information about security requirements (option B) is important but is not directly related to the physical aspects of the site that would impact a predictive design.

Testing antenna types (option C) would typically be part of an active site survey or the actual deployment phase, not a pre-design visit for predictive modeling.

Therefore, option D is the correct answer, focusing on evaluating physical aspects crucial for accurate predictive modeling.

In the 2.4 GHz frequency band used for 802.11 wireless networks, the channel bandwidth is typically 20 MHz, but the actual frequency spread of each channel is about 22 MHz due to the modulation techniques used. This spread causes overlap between adjacent channels, which can lead to interference and degrade network performance. To avoid this, it's essential to use non-overlapping channels.

The three non-overlapping channels in the 2.4 GHz band are 1, 6, and 11. Each of these channels is spaced sufficiently apart to avoid interference with each other:

Channel 1: Centered at 2.412 GHz.

Channel 6: Centered at 2.437 GHz.

Channel 11: Centered at 2.462 GHz.

Given the options provided, option C (1 and 5) is the closest to a pair of non-overlapping channels, although in practice, channel 5 would still cause some interference with channel 1 due to the 22 MHz spread. The ideal choice for non-overlapping channels would be any two channels among 1, 6, and 11, but this is not an option provided. Therefore, within the given options, 1 and 5 are the best choice, understanding that in a real-world scenario, 1 and 6 or 6 and 11 would be preferred to avoid overlap.

 VSWR stands for Voltage Standing Wave Ratio, which is a measure of how well the impedance of the RF cable and connectors matches the impedance of the transmitter and the antenna. Impedance is the opposition to the flow of alternating current in an RF circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. A perfect impedance match would have a VSWR of 1:1, meaning that all the power is transferred from the transmitter to the antenna, and none is reflected back. However, in reality, there is always some degree of mismatch, which causes some power to be reflected back to the transmitter, creating standing waves along the cable. This reduces the efficiency and performance of the wireless system, and can also damage the transmitter. Excessive VSWR can be caused by using poor quality or damaged cables and connectors, or by using components that have different impedance ratings123. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 90; CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 86; CWNP website, CWNA Certification.

The least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended is to use a 40 MHz channel on the 5 GHz radio. This solution can double the channel bandwidth and increase the data rates for the 5 GHz capable 802.11ac clients. Using a 40 MHz channel on the 5 GHz radio is also less likely to cause co-channel interference or overlap with other channels than using a 40 MHz channel on the 2.4 GHz radio, which has only three non-overlapping channels. Using a 160 MHz channel on the 5 GHz radio may provide even higher throughput, but it may also consume too much of the available spectrum and cause more interference with other devices or networks. Installing a second AP in the coverage area may also improve the throughput, but it may require additional costs and configuration. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 216; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 206.

A common problem that causes this scenario is captive portal issues. A captive portal is a web page that requires users to authenticate or accept terms and conditions before accessing the Internet through a WLAN. A captive portal is often used for guest networks to provide security and control over the network access. A captive portal works by intercepting the user’s web requests and redirecting them to the portal page until the user completes the required action. However, sometimes the captive portal may not work properly due to various reasons, such as browser settings, firewall rules, DNS configuration, or network errors. This can prevent the user from browsing the Internet or seeing the portal page. To troubleshoot captive portal issues, you can try to use a different browser, clear the browser cache and cookies, disable any VPN or proxy settings, manually enter the portal URL, or contact the network administrator. NTP issues, hardware issues, or IP routing issues are not common problems that cause this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 343; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 333.

To calculate the EIRP at the antenna element, we need to add the transmitter output power, subtract the cable loss, and add the antenna gain. All these values need to be converted to dBm first, if they are not already given in that unit. In this case, we have:

Transmitter output power = 50 mW = 10 log (50) dBm = 16.99 dBm Cable loss = 3 dB Antenna gain = 9 dBi

EIRP = Transmitter output power - Cable loss + Antenna gain EIRP = 16.99 - 3 + 9 EIRP = 22.99 dBm

Rounding up to the nearest integer, we get 23 dBm as the EIRP at the antenna element12. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 92; CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 88.

An isotropic radiator is a theoretical point source of electromagnetic radiation that radiates equally in all directions. It has no physical dimensions and no preferred direction of radiation. It is used as a reference for antenna gain because it represents the ideal case of a perfect omnidirectional antenna12

Antenna gain is a measure of how well an antenna concentrates its radiated power in a certain direction. It is expressed in decibels (dB) relative to a reference antenna. When the reference antenna is an isotropic radiator, the antenna gain is denoted by dBi, which stands for decibels relative to isotropic12

For example, an antenna with a gain of 3 dBi means that it radiates 3 dB more power in its main direction than an isotropic radiator would. Conversely, an antenna with a gain of -3 dBi means that it radiates 3 dB less power in its main direction than an isotropic radiator would12

In addition to coverage analysis results, what should be included in a post-deployment site survey report to ensure WLAN users experience acceptable performance is Capacity analysis results. Capacity analysis is a method of testing the ability of the WLAN to support the expected number and type of users, devices, and applications. Capacity analysis can help to determine the optimal number and placement of access points, the appropriate channel and power settings, the required QoS policies, and the expected throughput and latency levels. Capacity analysis results can help to verify that the WLAN meets the performance requirements and service level agreements (SLAs) of the organization. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 548; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 518.

The CWNA Official Study Guide (CWNA-109), Chapter 8: Troubleshooting and Spectrum Analysis, explains that hidden node problems occur when two or more client stations cannot hear each other but can both communicate with the same access point. This leads to collisions at the AP because the clients transmit simultaneously without sensing each other’s signals.

“Hidden node problems can often be identified in a protocol analyzer by observing excessive retransmissions from specific client stations. These retransmissions occur because the station’s frames are not acknowledged due to collisions caused by other stations that the transmitter cannot hear.”

— CWNA-108 Study Guide, Chapter 8, Hidden Node Problem Analysis, p. 393–395

Therefore, when analyzing for a hidden node issue, you will typically observe:

Retransmitted frames from multiple STAs.

Higher retry counts for affected stations compared to others.

Hence, the correct answer is C. Retransmitted frames from multiple STAs with higher retry counts than other STAs.

Sensors should be deployed in critical areas where WLAN performance must be high for best results when using a WLAN monitoring solution that utilizes distributed sensor devices. A WLAN monitoring solution is a system that collects, analyzes, and reports on the status and performance of a WLAN. A WLAN monitoring solution can use different methods to gather data from the WLAN, such as embedded software agents, external hardware probes, or distributed sensor devices. Distributed sensor devices are dedicated devices that are deployed throughout the WLAN coverage area to monitor the wireless traffic and environment. Distributed sensor devices can perform various functions, such as scanning the spectrum, capturing wireless frames, measuring signal quality, detecting rogue access points, testing connectivity, and generating alerts. Distributed sensor devices can provide more accurate and comprehensive data than other methods, but they also require more planning and deployment costs. Therefore, it is important to deploy sensors strategically in critical areas where WLAN performance must be high, such as high-density zones, high-priority applications, or high-security locations. By deploying sensors in critical areas, the WLAN monitoring solution can ensure optimal WLAN performance and reliability in those areas and identify and resolve any issues or problems that may arise. The other options are not the best places to deploy sensors for best results. Deploying sensors in switching closets is not effective because sensors need to be close to the wireless medium to monitor it properly. Deploying sensors every 5 meters and alongside each AP is not efficient because sensors may overlap or interfere with each other and cause unnecessary redundancy or complexity. Deploying sensors above the plenum on each floor is not practical because sensors may not capture the wireless traffic and environment accurately due to attenuation or reflection from the ceiling materials or objects. References: CWNA-109 Study Guide, Chapter 14: Troubleshooting Wireless LANs, page 4831

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 289.

The guard interval is a short period of time inserted between the symbols of an OFDM signal to prevent inter-symbol interference and improve the robustness of the transmission1. The guard interval can have different values depending on the 802.11 standard and the configuration of the device. For example, 802.11n supports two guard intervals: 800 ns (normal) and 400 ns (short)2. 802.11ac supports the same guard intervals as 802.11n, plus an optional 200 ns guard interval for 80 MHz and 160 MHz channels3. 802.11ax supports three guard intervals: 800 ns, 1600 ns, and 3200 ns4.

The guard interval affects the data rate because it determines the duration of each symbol. A shorter guard interval means more symbols can be transmitted in a given time, resulting in a higher data rate. However, a shorter guard interval also means less protection against inter-symbol interference, which may degrade the signal quality and increase the error rate. Therefore, there is a trade-off between data rate and reliability when choosing the guard interval.

The MCS tables for HT and VHT PHY devices show the data rates for different combinations of modulation, coding, channel width, spatial streams, and guard intervals. For example, for a VHT device using MCS 9 with QAM-256 modulation, 5/6 coding rate, 80 MHz channel width, and one spatial stream, the data rate is 433.3 Mbps with a normal guard interval (800 ns) and 486.7 Mbps with a short guard interval (400 ns)2. Therefore, the guard interval impacts the data rate according to the MCS tables.

What should be inspected to verify proper configuration is DNS. DNS stands for Domain Name System and is a service that resolves hostnames to IP addresses. In a controller-based AP deployment, DNS can be used to help the AP locate the controller by using a predefined hostname such as CISCO-CAPWAP-CONTROLLER or aruba-master. The AP sends a DNS query for this hostname and receives an IP address of the controller as a response. Therefore, if DNS is not configured properly or if there is no DNS entry for the controller hostname, the AP may not be able to locate the controller. NTP, BOOTP, and AP hosts file are not relevant for this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 374; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 364.

The tool described is a WLAN (Wireless Local Area Network) scanner tool. WLAN scanner tools are designed to provide information about the wireless networks in a given area, including:

Signal Strength: They show the signal strength of all access points (APs) in the vicinity, which is crucial for understanding the coverage area and potential interference.

SSID Visualization: These tools display the SSIDs (Service Set Identifiers) of available networks, allowing users to identify different wireless networks easily.

Security Settings Information: WLAN scanner tools often show the type of security implemented on each network, such as WPA2, WEP, etc.

Frequency Band Filtering: They allow users to filter and view networks based on the frequency band (2.4 GHz or 5 GHz), which is useful for analyzing network distribution and planning.

While protocol analyzers, site survey utilities, and spectrum analyzers are also used in wireless networking, their functions are distinct from what is described:

Protocol Analyzers are more sophisticated and are used to capture and analyze network traffic.

Site Survey Utilities are used to map signal coverage and plan network layouts, often with more advanced features for detailed site surveys.

Spectrum Analyzers provide a detailed view of the frequency spectrum and non-Wi-Fi interference but don't typically focus on SSIDs or security settings.

Thus, the correct answer is D, a WLAN scanner tool, based on the functionalities described.

An access point is configured by a WLAN controller in the management plane of the three networking planes. The management plane is responsible for the configuration, administration, and monitoring of network devices, such as access points, switches, routers, and controllers. The WLAN controller communicates with the access point using a management protocol, such as CAPWAP or SNMP, to send configuration commands and receive status information. The control plane is responsible for the routing, switching, and forwarding of network traffic, such as data frames and control frames. The WLAN controller may also participate in the control plane by performing functions such as authentication, encryption, roaming, and load balancing. The security plane is responsible for the protection of network devices and data from unauthorized access, modification, or disclosure. The WLAN controller may also participate in the security plane by implementing features such as firewall, VPN, IDS/IPS, and WIPS. The data plane is responsible for the transmission and reception of user data, such as voice, video, or web traffic. The WLAN controller may or may not participate in the data plane depending on the architecture of the WLAN. In some cases, the access point forwards the user data directly to the wired network without involving the WLAN controller (distributed data forwarding). In other cases, the access point tunnels the user data to the WLAN controller before forwarding it to the wired network (centralized data forwarding). References: CWNA-109 Study Guide, Chapter 9: Wireless LAN Architecture, page 279

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchange protocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 297.

The center frequency of channel 4 in the 2.4 GHz band is 2.427 GHz (2427 MHz). The center frequency of a channel is the midpoint of its frequency range, where the signal strength is highest and most concentrated. The center frequency of channel 1 in the 2.4 GHz band is 2.412 GHz (2412 MHz), as given in the question. The center frequency of each subsequent channel is obtained by adding 5 MHz to the previous channel’s center frequency, since the channels are spaced 5 MHz apart from each other in this band. Therefore, to find the center frequency of channel 4, we need to add 15 MHz (5 MHz x 3) to the center frequency of channel 1:

2.412 GHz + 0.015 GHz = 2.427 GHz

Alternatively, we can use a formula to calculate the center frequency of any channel in the 2.4 GHz band:

Center frequency (GHz) = 2.407 + (0.005 x Channel number)

Using this formula for channel 4, we get:

Center frequency (GHz) = 2.407 + (0.005 x 4)

Center frequency (GHz) = 2.407 + 0.02

Center frequency (GHz) = 2.427 References: 1, Chapter 3, page 85; 2, Section 3.2

PoE has different standards that define different power levels for PSEs and PDs. The original standard, IEEE 802.3af, defines two classes of PSEs: Class 3 (15.4 W) and Class 4 (30 W). The newer standard, IEEE 802.3at, also known as PoE+, defines four classes of PSEs: Class 0 (15.4 W), Class 1 (4 W), Class 2 (7 W), and Class 3 (12.95 W). The power level received at the PD is always lower than the power level provided by the PSE, due to cable resistance and power dissipation. The IEEE standards specify the minimum power level that must be received at the PD for each class of PSE. For a Class 4 PSE, the minimum power level received at the PD is 25.5 W910. References: CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 295; CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 289.

OFDM (Orthogonal Frequency Division Multiplexing) is the physical layer specification (PHY) that VHT capable devices must be backward compatible with according to the IEEE 802.11-2012 standard. VHT (Very High Throughput) is a PHY and MAC enhancement that is defined in the IEEE 802.11ac amendment and is also known as Wi-Fi 5. VHT operates only in the 5 GHz band and uses features such as wider channel bandwidths (up to 160 MHz), higher modulation schemes (up to 256-QAM), more spatial streams (up to eight), multi-user MIMO (MU-MIMO), beamforming, and VHT PHY and MAC enhancements. VHT can achieve data rates up to 6.9 Gbps.

According to the IEEE 802.11-2012 standard, VHT capable devices must be backward compatible with devices using OFDM PHY, which is defined in the IEEE 802.11a amendment and is also used by IEEE 802.11g, IEEE 802.11n, and IEEE 802.11h amendments. OFDM operates in both the 2.4 GHz and 5 GHz bands and uses features such as subcarriers, symbols, guard intervals, and OFDM PHY and MAC enhancements. OFDM can achieve data rates up to 54 Mbps.

Backward compatibility means that VHT capable devices can interoperate with OFDM devices on the same network by using common features and parameters that are supported by both PHYs. For example, VHT capable devices can use a channel bandwidth of 20 MHz, a modulation scheme of BPSK, QPSK, or 16-QAM, one spatial stream, no beamforming, and OFDM PHY and MAC headers when communicating with OFDM devices. Backward compatibility also means that VHT capable devices can fall back to OFDM mode when the signal quality or SNR is too low for VHT mode. References: 1, Chapter 3, page 123; 2, Section 3.2

A high-density deployment is a wireless network that is designed to support a large number of users and devices in a relatively small area. This type of deployment is often used in enterprise environments, such as offices, schools, and hospitals.

The use of semi-directional antennas in the deployment described in the question is a good indication that it is a high-density deployment. Semi-directional antennas can be used to focus the signal from an access point in a specific direction. This can help to reduce interference and improve performance in high-density environments.

The other answer choices are less likely to be correct for the following reasons:

SOHO (small office/home office) deployments are typically smaller and less complex than high-density deployments.

Residential deployments are typically even smaller and less complex than SOHO deployments.

Standard office deployments may be high-density, but they may also be lower-density.

It is important to note that the type of deployment is not determined solely by the output power of the access points. However, the use of 10 mW of output power on the 2.4 GHz radios and 20 mW of output power on the 5GHz radios is also consistent with a high-density deployment.

Here are some additional tips for deploying a high-density wireless network:

Use a site survey to determine the optimal placement of access points.

Configure the access points to use non-overlapping channels.

Use semi-directional or directional antennas to focus the signal and reduce interference.

Implement a wireless intrusion prevention system (WIPS) to detect and mitigate rogue access points and other security threats.

A common feature of MDM solutions that can be used to protect enterprise data on mobile devices is containerization. Containerization is a technique that creates a separate and secure environment on the mobile device where enterprise data and applications are stored and accessed. Containerization isolates the enterprise data from the personal data and prevents unauthorized access, leakage, or loss of sensitive information. Containerization can also enforce security policies, encryption, authentication, and remote wipe on the enterprise data and applications. Over-the-air registration, onboarding, and self-registration are features of MDM solutions that facilitate the enrollment and management of mobile devices, but they do not directly protect enterprise data on mobile devices. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 336; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 326.

WLAN bridges must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally. A WLAN bridge is a device that connects two or more networks using the 802.11 protocol. A WLAN bridge must have a clear and strong signal between the two endpoints to ensure reliable and fast data transmission. The signal-to-noise ratio (SNR) is a measure of the quality of the signal, which depends on the distance, interference, obstacles, and antenna gain between the transceivers. A higher SNR means a better signal quality and a higher data rate. A lower SNR means a worse signal quality and a lower data rate. Therefore, a WLAN bridge must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally1.