Pass the CWNP CWNA CWNA-109 Questions and answers with ValidTests

WLAN bridges must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally. A WLAN bridge is a device that connects two or more networks using the 802.11 protocol. A WLAN bridge must have a clear and strong signal between the two endpoints to ensure reliable and fast data transmission. The signal-to-noise ratio (SNR) is a measure of the quality of the signal, which depends on the distance, interference, obstacles, and antenna gain between the transceivers. A higher SNR means a better signal quality and a higher data rate. A lower SNR means a worse signal quality and a lower data rate. Therefore, a WLAN bridge must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally1.

The scenario described suggests that while the Access Point (AP) is capable of 802.11ax (Wi-Fi 6) with four spatial streams, the clients are only achieving data rates typical of 802.11n (Wi-Fi 4) devices, which indicates that the clients are likely 802.11n devices. Here's why this is the most plausible explanation:

802.11n Limitations: Devices that adhere to the 802.11n standard have lower maximum data rates compared to 802.11ax devices due to differences in technology such as modulation, spatial streams, and channel bandwidth. An 802.11n device with a single spatial stream operating on a 20 MHz channel can achieve a maximum data rate of 72.2 Mbps. Even with two spatial streams under ideal conditions, this would only double to approximately 144.4 Mbps, which is close to the 150 Mbps mentioned.

Spatial Stream Capability: The fact that the AP supports four spatial streams suggests it can achieve much higher data rates with 802.11ax clients that also support multiple spatial streams. However, if the clients are 802.11n devices, they may not be capable of using more than two spatial streams, and many earlier 802.11n devices were limited to just one.

The other options are less likely to be the primary cause based on the information provided:

B. Two Stream 802.11ax Clients: If the clients were 802.11ax with only two spatial streams, they would likely achieve higher data rates than 150 Mbps due to the efficiency improvements in 802.11ax.

C. Contention and D. Non-Wi-Fi Interference: While these could affect performance, they would not inherently limit clients to 150 Mbps,especially in the context of an 802.11ax environment where mechanisms to handle interference and contention are more advanced.

References:

IEEE 802.11n-2009: Enhancements for Higher Throughput.

CWNA Certified Wireless Network Administrator Official Study Guide: Exam PW0-105, by David D. Coleman and David A. Westcott.

The factors that will have the most significant impact on the amount of wireless bandwidth available to each station within a BSS are:

The number of client stations associated to the BSS

The presence of co-located (10m away) access points on non-overlapping channels

The number of client stations associated to the BSS affects the wireless bandwidth because each station shares the same channel and medium with other stations in the same BSS. The more stations there are, the more contention and collision there will be for the channel access, which reduces thethroughput and efficiency of the wireless communication. The wireless bandwidth available to each station depends on how the access point allocates the channel resources and how the stations use the channel time. For example, if the access point uses a round-robin scheduling algorithm, each station will get an equal share of the channel time regardless of its data rate or traffic demand. However, if the access point uses a proportional fair scheduling algorithm, each station will get a share of the channel time that is proportional to its data rate and traffic demand, which may result in higher or lower bandwidth for different stations.

The presence of co-located (10m away) access points on non-overlapping channels affects the wireless bandwidth because even though they use different channels, they may still cause interference and noise to each other due to channel leakage or imperfect filtering. The interference and noise can degrade the signal quality and SNR of the wireless communication, which reduces the data rate and throughput of the wireless communication. The wireless bandwidth available to each station depends on how well the access point and the station can cope with the interference and noise from other channels. For example, if the access point and the station support dynamic frequency selection (DFS) or adaptive radio management (ARM), they can switch to a less congested channel or adjust their output power or antenna gain to avoid or minimize interference from other channels.

References:1, Chapter 3, page 94;2, Section 3.2

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchangeprotocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.

WPA2 (Wi-Fi Protected Access 2) is a security certification program developed by the Wi-Fi Alliance to secure wireless computer networks. It is important to understand the following:

WPA2 and the 802.11 Standard: While WPA2 is based on elements of the 802.11i amendment to the 802.11 standard, it is not itself a standard but rather a certification to ensure devices comply with certain security criteria, including the correct implementation of CCMP (Counter Mode Cipher Block Chaining Message Authentication Code Protocol) and AES (Advanced Encryption Standard).

CCMP/AES Implementation: WPA2 enhances the security of wireless networks by using CCMP for encryption, which is based on AES, a robust encryption algorithm. This represents a significant security improvement over WEP (Wired Equivalent Privacy) and WPA (Wi-Fi Protected Access) that used TKIP (Temporal Key Integrity Protocol).

WPA vs. WPA2: WPA was the interim security enhancement over WEP, utilizing TKIP for encryption. WPA2, however, moved to the more secure AES-based encryption method. Contrary to option C, WPA2 does not enhance security by using TKIP; it uses CCMP/AES.

Therefore, option B correctly describes WPA2 as a certification program ensuring devices properly implement the more secure CCMP/AES encryption methods.

References:

Wi-Fi Alliance website for WPA2 certification details.

IEEE 802.11i-2004: Amendment for Enhanced Security.

An isotropic radiator is a theoretical point source of electromagnetic radiation that radiates equally in all directions. It has no physical dimensions and no preferred direction of radiation. It is used as a reference for antenna gain because it represents the ideal case of a perfect omnidirectional antenna12

Antenna gain is a measure of how well an antenna concentrates its radiated power in a certain direction. It is expressed in decibels (dB) relative to a reference antenna. Whenthe reference antenna is an isotropic radiator, the antenna gain is denoted by dBi, which stands for decibels relative to isotropic12

For example, an antenna with a gain of 3 dBi means that it radiates 3 dB more power in its main direction than an isotropic radiator would. Conversely, an antenna with a gain of -3 dBi means that it radiates 3 dB less power in its main direction than an isotropic radiator would12

 This is because the passphrase for WPA2-Personal is case-sensitive and must match exactly on both the AP and the client. If the passphrase is entered incorrectly on the client, the client will not be able to authenticate with the AP and connect to the network. The AP that covers the problem area is not likely to require a firmware update, fail, or be improperly configured, as it is online and works with other clients that have the correct passphrase. To troubleshoot this issue, you can check the passphrase settings on the clients and make sure they matchwith the AP. You can also try to reconnect the clients to the network or reboot them if necessary. For more information on how to configure WPA2-Personal on your router

The RF energy that exists in the environment from intentional and unintentional RF radiators that forms the baseline above which the intentional signal of your WLAN must exist is the best explanation of the noise floor noted in the report. The noise floor is a term that describes the level of background noise or interference in a wireless channel or band. The noise floor is measured in dBm (decibel-milliwatts) and it represents the minimum signal strength that can be detected or received by a wireless device. The noise floor is influenced by various factors, such as the sensitivity of the receiver, the antenna gain, the cable loss, and the ambient RF environment. The ambient RF environment consists of intentional and unintentional RF radiators that emit RF energy in the wireless spectrum. Intentional RF radiators are devices that are designed to transmit RF signals for communication purposes, such as Wi-Fi access points, Bluetooth devices, microwave ovens, or cordless phones. Unintentional RF radiators are devices that are not designed to transmit RF signals but generate electromagnetic radiation as a by-product of their operation, such as USB 3 devices, PC power supplies, or fluorescent lights. The noise floor affects WLAN performance and quality because it determines the minimum signal-to-noise ratio (SNR) that is required for a successful wireless transmission. SNR is the difference between the signal strength of the desired signal and the noise floor of the channel. SNR is also measured in dB and it indicates how much the signal stands out from the noise. A higher SNR means a better signal quality and a lower bit error rate. A lower SNR means a worse signal quality and a higher bit error rate. Therefore, to achieve a reliable WLAN connection, the intentional signal of your WLAN must exist above the noise floor by a certain margin that depends on the data rate and modulation scheme used. The other options are not accurate or complete explanations of the noise floor noted in the report. The noise caused by elevators, microwave ovens, and video transmitters is not the noise floor but rather examples of interference sources that contribute to the noise floor. The extra energy radiated by access points and client devices beyond that intended for the signal is not the noise floor but rather an example of spurious emissions that cause interference to other devices or channels. The energy radiated by flooring materials that causes interference in the 2.4 GHz and 5 GHz bands is not the noise floor but rather an example of attenuation or reflection that reduces or changes the direction of the signal. References: CWNA-109 Study Guide, Chapter 5: Radio Frequency Signal and Antenna Concepts, page 139

The two IEEE amendments that should be supported to provide the management frame protection and fast secure roaming security features are 802.11r and 802.11w12.

802.11r (Fast BSS Transition): This amendment to the IEEE 802.11 standard permits continuous connectivity aboard wireless devices in motion, with fast and secure client transitions from one Basic Service Set to another1.

802.11w (Management Frame Protection): This amendment increases the security of its management frames2.

Passive Gain is the increase of RF energy in an intentional direction with the use of an antenna. It is achieved by focusing the same amount of power into a smaller area, resulting in a higher power density and a stronger signal. Passive Gain does not require any additional power or amplification, but rather depends on the antenna’s physical characteristics, such as size, shape, and orientation. Passive Gain is also expressed in decibels (dB) and is related to the antenna’s beamwidth and directivity. References: 1, Chapter 2, page 63; 2, Section 2.3