Pass the CWNP CWNA CWNA-109 Questions and answers with Dumpstech

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 289.

The error in administration that could be the cause of this security concern is that HTTP is in use instead of HTTPS. HTTP is an unencrypted protocol that transfers data in plain text over the network. This means that anyone who captures the traffic can see the HTML code of the Web pages used for access point management, as well as any sensitive information such as passwords or configuration settings. HTTPS is an encrypted protocol that uses SSL/TLS to secure the data transmission between the Web browser and the Web server. HTTPS prevents anyone from snooping on or tampering with the Web traffic. Therefore, HTTPS should always be used for Web based management of wireless access points, especially in autonomous mode where there is no centralized controller to enforce security policies. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 431; [HTTP vs HTTPS: What’s The Difference And Why Should You Care?].

OFDM (Orthogonal Frequency Division Multiplexing) is the physical layer specification (PHY) that VHT capable devices must be backward compatible with according to the IEEE 802.11-2012 standard. VHT (Very High Throughput) is a PHY and MAC enhancement that is defined in the IEEE 802.11ac amendment and is also known as Wi-Fi 5. VHT operates only in the 5 GHz band and uses features such as wider channel bandwidths (up to 160 MHz), higher modulation schemes (up to 256-QAM), more spatial streams (up to eight), multi-user MIMO (MU-MIMO), beamforming, and VHT PHY and MAC enhancements. VHT can achieve data rates up to 6.9 Gbps.

According to the IEEE 802.11-2012 standard, VHT capable devices must be backward compatible with devices using OFDM PHY, which is defined in the IEEE 802.11a amendment and is also used by IEEE 802.11g, IEEE 802.11n, and IEEE 802.11h amendments. OFDM operates in both the 2.4 GHz and 5 GHz bands and uses features such as subcarriers, symbols, guard intervals, and OFDM PHY and MAC enhancements. OFDM can achieve data rates up to 54 Mbps.

Backward compatibility means that VHT capable devices can interoperate with OFDM devices on the same network by using common features and parameters that are supported by both PHYs. For example, VHT capable devices can use a channel bandwidth of 20 MHz, a modulation scheme of BPSK, QPSK, or 16-QAM, one spatial stream, no beamforming, and OFDM PHY and MAC headers when communicating with OFDM devices. Backward compatibility also means that VHT capable devices can fall back to OFDM mode when the signal quality or SNR is too low for VHT mode. References: 1, Chapter 3, page 123; 2, Section 3.2

Fade Margin is an additional pad of signal strength designed into the RF system to compensate for unpredictable signal fading. It is the difference between the receiver’s sensitivity and the actual received signal level. A higher Fade Margin indicates a more robust link that can withstand interference, attenuation, or other factors that may reduce the signal strength. A lower Fade Margin means that the link is more susceptible to failure or performance degradation. Fade Margin is usually expressed in decibels (dB) and can be calculated by subtracting the receiver sensitivity from the received signal level. References: 1, Chapter 2, page 51; 2, Section 2.1

The channel that can be used for VHT transmissions according to the 802.11 specification is channel 144. VHT stands for Very High Throughput and is the PHY layer specification for 802.11ac devices. VHT transmissions can use channel bandwidths of 20 MHz, 40 MHz, 80 MHz, or 160 MHz in the 5 GHz band. Channel 144 is one of the channels in the 5 GHz band that can support VHT transmissions with any of these bandwidths. Channel 6, channel 1, and channel 11 are channels in the 2.4 GHz band that cannot support VHT transmissions, as they are only compatible with legacy (802.11b/g/n), HT (802.11n), or ERP (802.11g) transmissions with up to 20 MHz bandwidth. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 214; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 204.

The client STA can use Beacon frames transmitted by the AP to verify that an AP supports the same data rates that it supports. Beacon frames are management frames that are periodically broadcasted by the APs to announce their presence, capabilities, and parameters. One of the information elements contained in the Beacon frames is the Supported Rates or Extended Supported Rates, which lists the data rates that the AP can use for communication. The client STA can compare its own data rates with those advertised by the AP to determine if they are compatible. Data frames, authentication frames, and probe request frames do not contain information about data rates. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 133; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 123.

In the 802.11ax (High Efficiency, HE) amendment, one of the key features introduced is BSS (Basic Service Set) Coloring. This feature is designed to mitigate issues arising from overlapping BSSs (OBSS), which can lead to contention and interference in dense wireless environments. BSS Coloring works by:

Assigning a "color" (a small number) to each BSS: This helps devices differentiate between frames from their own BSS and those from neighboring BSSs.

Reducing Inter-BSS Interference: Devices can ignore frames from different BSSs (with a different "color") under certain conditions, reducing the impact of OBSS interference.

Improving Spatial Reuse: By distinguishing between transmissions from different BSSs, devices can make more informed decisions about when to transmit, improving the efficiency of spatial reuse and reducing unnecessary contention.

This feature directly impacts design decisions related to AP placement and the spacing between same-channel BSS cells, as it allows for closer placement of APs on the same channel without significantly increasing interference, thus improving overall network capacity and efficiency.

The other options, while features of 802.11ax, do not directly pertain to reducing overlapping BSS contention in the same manner:

TWT (Target Wake Time) optimizes device sleep schedules to conserve power.

Uplink MU-MIMO enhances uplink data transmission capabilities but doesn't specifically address OBSS contention.

6 GHz Band Support introduces new spectrum for Wi-Fi use but is not a feature aimed at reducing OBSS contention within the 802.11ax framework.

Therefore, the correct answer is B, BSS Color.

 What you should tell him is that due to 802.11 network operations and the dynamic rates used by devices on the network, the two radios will likely not exceed the 1 Gbps Ethernet link. This is because the actual throughput of an 802.11 network is much lower than the theoretical data rates due to factors such as overhead, contention, interference, retransmissions, and environmental conditions. Moreover, the data rates used by devices on the network vary depending on their distance, signal quality, capabilities, and configuration. Therefore, it is unlikely that both radios of the AP will simultaneously use the maximum data rates and saturate the 1 Gbps Ethernet link. Upgrading to a 10 Gbps Ethernet link or running a second 1 Gbps Ethernet link may be unnecessary and costly. Compressing all data before transmitting it onto the Ethernet link may introduce additional overhead and latency. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 227; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 217.

DHCP (Dynamic Host Configuration Protocol) is the network service where option 43 must be configured to allow access points to locate controllers. DHCP is a protocol that allows a device to obtain an IP address and other network configuration parameters from a server. In a wireless controller scenario, the access points can use DHCP to request an IP address from a DHCP server, which can also provide the IP address or hostname of the wireless controller as an option in the DHCP response. Option 43 is a vendor-specific option that can be used to encode custom information for different types of devices. For example, Cisco access points can use option 43 to receive the IP address of the wireless controller from the DHCP server, while Aruba access points can use option 43 to receive the hostname of the wireless controller from the DHCP server. This way, the access points can discover the wireless controller and establish a connection with it. References: 1, Chapter 8, page 309; 2, Section 5.2