Pass the CWNP CWNA CWNA-109 Questions and answers with ExamsMirror

The BSSID (Basic Service Set Identifier) is typically mapped to an AP’s MAC address if a single BSS is implemented. The BSSID is a unique identifier that distinguishes one BSS from another within the same RF medium. It is usually derived from the MAC address of the AP’s radio interface, but it can also be manually configured or randomly generated by some vendors. The BSSID is used by client stations to associate with an AP and to send and receive frames within a BSS. References: , Chapter 1, page 24; , Section 1.2

Weak signal strength is the likely cause of the low data rate issue for the client that has a signal strength of -84 dBm and a noise floor of -96 dBm. The client is an 802.11ac client and connects to an 802.11ac AP. Both the client and AP are 2x2:2 devices. Signal strength is the measure of how strong the RF signal is at the receiver. Signal strength can affect the reliability and performance of the wireless connection, as well as the data rate and throughput of the traffic. The higher the signal strength, the better the signal quality and the higher the data rate. The lower the signal strength, the worse the signal quality and the lower the data rate.

The data rate of an 802.11ac connection depends on several factors, such as channel bandwidth, modulation and coding scheme (MCS), spatial streams, guard interval, and beamforming. However, these factors are also influenced by the signal strength, as they require a certain signal-to-noise ratio (SNR) to operate properly. SNR is the ratio of the signal strength to the noise floor, which is the measure of the background noise or interference in the RF environment. The higher the SNR, the more robust and efficient the communication. The lower the SNR, the more prone and vulnerable to errors and retries.

According to the CWNA Official Study Guide , Table 3.7, page 112, an 802.11ac connection with a channel bandwidth of 80 MHz, an MCS of 9, two spatial streams, a short guard interval, and no beamforming can achieve a maximum data rate of 867 Mbps. However, this data rate requires a minimum SNR of 30 dB to maintain a sufficient signal quality. If the signal strength is -84 dBm and the noise floor is -96 dBm, then the SNR is only 12 dB (-84 dBm - (-96 dBm) = 12 dB), which is far below the required SNR for this data rate. Therefore, the data rate will drop significantly to match the lower SNR and signal quality.

To solve this problem, the signal strength should be increased to improve the SNR and data rate. This can be done by adjusting the output power or channel assignment of the AP or client, relocating or reorienting some APs or antennas to reduce attenuation or interference, updating or replacing some faulty oroutdated hardware or software components, etc. References: , Chapter 3, page 112; , Section 3.2

In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical step is:

Station-to-Station Traffic Blocking: Also known as client isolation, this feature prevents direct communication between devices connected to the Wi-Fi network. By enabling this on the access points, Lynne can significantly decrease the likelihood of active attacks like man-in-the-middle (MITM) attacks, where an attacker intercepts and possibly alters the communication between two parties.

The other options, while beneficial for network security, might not be as straightforward or practical for Lynne's situation:

Network Access Control (NAC)requires a more complex infrastructure and management, which might not be ideal for a small hotel setup.

Implementing an SSL VPNadds an extra layer of security but might complicate the login process for users, potentially affecting the user experience.

Requiring EAP-FAST authenticationprovides secure authentication but may not be feasible for transient customers who expect quick and easy network access.

Therefore, enabling station-to-station traffic blocking is a practical and efficient measure that Lynne can implement to enhance customer security on the Wi-Fi network.

References:

CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.

Best practices for securing a wireless network in a public hotspot environment.

The factors that will have the most significant impact on the amount of wireless bandwidth available to each station within a BSS are:

The number of client stations associated to the BSS

The presence of co-located (10m away) access points on non-overlapping channels

The number of client stations associated to the BSS affects the wireless bandwidth because each station shares the same channel and medium with other stations in the same BSS. The more stations there are, the more contention and collision there will be for the channel access, which reduces thethroughput and efficiency of the wireless communication. The wireless bandwidth available to each station depends on how the access point allocates the channel resources and how the stations use the channel time. For example, if the access point uses a round-robin scheduling algorithm, each station will get an equal share of the channel time regardless of its data rate or traffic demand. However, if the access point uses a proportional fair scheduling algorithm, each station will get a share of the channel time that is proportional to its data rate and traffic demand, which may result in higher or lower bandwidth for different stations.

The presence of co-located (10m away) access points on non-overlapping channels affects the wireless bandwidth because even though they use different channels, they may still cause interference and noise to each other due to channel leakage or imperfect filtering. The interference and noise can degrade the signal quality and SNR of the wireless communication, which reduces the data rate and throughput of the wireless communication. The wireless bandwidth available to each station depends on how well the access point and the station can cope with the interference and noise from other channels. For example, if the access point and the station support dynamic frequency selection (DFS) or adaptive radio management (ARM), they can switch to a less congested channel or adjust their output power or antenna gain to avoid or minimize interference from other channels.

References:1, Chapter 3, page 94;2, Section 3.2

The beamwidth of an RF antenna is the angular measure of how wide the main lobe of radiation is. The main lobe is the area where the signal strength is highest and most concentrated. The beamwidth is calculated at the points where the main lobe decreases power by 3 dB, which means it is half of the maximum power. The beamwidth can be measured in both horizontal and vertical planes, depending on how the antenna is oriented. The horizontal beamwidth is also called azimuth, while the vertical beamwidth is also called elevation. The beamwidth patterns on an antenna polar chart indicate how the RF energy is distributed in different directions. References: 1, Chapter 2, page 66; 2, Section 2.3

 VSWR stands for Voltage Standing Wave Ratio, which is a measure of how well the impedance of the RF cable and connectors matches the impedance of the transmitter and the antenna. Impedance is the opposition to the flow of alternating current in an RF circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. A perfect impedance match would have a VSWR of 1:1, meaning that all the power is transferred from the transmitter to the antenna, and none is reflected back. However, in reality, there is always some degree of mismatch, which causes some power to be reflected back to the transmitter, creating standing waves along the cable. This reduces the efficiency and performance of the wireless system, and can also damage the transmitter. Excessive VSWR can be caused by using poor quality or damaged cables and connectors, or by using components that have different impedance ratings123. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 90; CWNA-109Study Guide, Chapter 2: Radio Frequency Fundamentals, page 86; CWNP website, CWNA Certification.

The guard interval is a short period of time inserted between the symbols of an OFDM signal to prevent inter-symbol interference and improve the robustness of the transmission1. The guard interval can have different values depending on the 802.11 standard and the configuration of the device. For example, 802.11n supports two guard intervals: 800 ns (normal) and 400 ns (short)2. 802.11ac supports the same guard intervals as 802.11n, plus an optional 200 ns guard interval for 80 MHz and 160 MHz channels3. 802.11ax supports three guard intervals: 800 ns, 1600 ns, and 3200 ns4.

The guard interval affects the data rate because it determines the duration of each symbol. A shorter guard interval means more symbols can be transmitted in a given time, resulting in a higher data rate. However, a shorter guard interval also means less protection against inter-symbol interference, which may degrade the signal quality and increase the error rate. Therefore, there is a trade-off between data rate and reliability when choosing the guard interval.

The MCS tables for HT and VHT PHY devices show the data rates for different combinations of modulation, coding, channel width, spatial streams, and guard intervals. For example, for a VHT device using MCS 9 with QAM-256 modulation, 5/6 coding rate, 80 MHz channel width, and one spatial stream, the data rate is 433.3 Mbps with a normal guard interval (800 ns) and 486.7 Mbps with a short guard interval (400 ns)2. Therefore, the guard interval impacts the data rate according to the MCS tables.

The error in administration that could be the cause of this security concern is that HTTP is in use instead of HTTPS. HTTP is an unencrypted protocol that transfers data in plain text over the network. This means that anyone who captures the traffic can see the HTML code of the Web pages used for access point management, as well as any sensitive information such as passwords or configuration settings. HTTPS is an encrypted protocol that uses SSL/TLS to secure the data transmission between the Web browser and the Web server. HTTPS prevents anyone from snooping on or tampering with the Web traffic. Therefore, HTTPS should always be used for Web based management of wireless access points, especially in autonomous mode where there is no centralized controller to enforce security policies. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 431; [HTTP vs HTTPS: What’s The Difference And Why Should You Care?].

DHCP (Dynamic Host Configuration Protocol) is the network service where option 43 must be configured to allow access points to locate controllers. DHCP is a protocol that allows a device to obtain an IP address and other network configuration parameters from a server. In a wireless controller scenario, the access points can use DHCP to request an IP address from a DHCP server, which can also provide the IP address or hostname of the wireless controller as an option in the DHCP response. Option 43 is a vendor-specific option that can be used to encode custom information for different types of devices. For example, Cisco access points can use option 43 to receive the IP address of the wireless controller from the DHCP server, while Aruba access points can use option 43 to receive the hostname of the wireless controller from the DHCP server. This way, the access points can discover the wireless controller and establish a connection with it. References: 1, Chapter 8, page 309; 2, Section 5.2

WLAN bridges must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally. A WLAN bridge is a device that connects two or more networks using the 802.11 protocol. A WLAN bridge must have a clear and strong signal between the two endpoints to ensure reliable and fast data transmission. The signal-to-noise ratio (SNR) is a measure of the quality of the signal, which depends on the distance, interference, obstacles, and antenna gain between the transceivers. A higher SNR means a better signal quality and a higher data rate. A lower SNR means a worse signal quality and a lower data rate. Therefore, a WLAN bridge must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally1.