Free CWNP CWAP-405 Exam Questions and Answer from Training Expert Test4Cram
Top CWNP CWAP-405 Courses Online
NEW QUESTION # 29
You are responsible for troubleshooting and analysis of the WLAN in your organization that supports more than 700 client STAs. Forty APs are deployed and they are all dual-band APs and are controller-based. You must troubleshoot the wired side in some scenarios using a protocol analyzer.
Which one of the following problems would warrant wired-side analysis in most situations?
- A. WMM QoS issues
- B. DHCP problems
- C. High 802.11 CRC rates
- D. High 802.11 retry rates
Answer: A
NEW QUESTION # 30
Given: The Frame Check Sequence (FCS) is a 32 CRC used for error detection.
The CRC is calculated over what?
- A. PHY Header, MAC Header and Frame Body
- B. Mac Header and Frame Body only
- C. Frame Body only
- D. PHY Header and Mac Header only
Answer: B
Explanation:
The CRC is calculated over the MAC Header and Frame Body only. The CRC (Cyclic Redundancy Check) is a 32-bit value that is used for error detection in wireless transmissions. The CRC is calculated over the MAC Header and Frame Body of a PSDU, which are the parts of the data unit that contain information such as source and destination addresses, frame type, frame control, sequence number, payload, etc. The CRC is appended to the end of the PSDU as a FCS (Frame Check Sequence) field. The CRC is not calculated over the PHY Header or PHY Preamble, which are parts of the PPDU that contain information such as modulation, coding, data rate, etc. The PHY Header and PHY Preamble are added or removed by the PHY layer during the conversion between PSDU and PPDU. References: [Wireless Analysis Professional Study Guide CWAP-
405], Chapter 4: 802.11 Physical Layer, page 97-98
NEW QUESTION # 31
You have implemented centralized, infrastructure-based spectrum analysis. The Aps are configured to perform spectrum analysis in an ad-hoc manner and will go offline as Aps to perform this duty when needed.
What unique method of spectrum analysis monitoring is provided by this solution that is not typically available in a laptop-based analyzer?
- A. RBW adjustments
- B. Real-time FFT
- C. Web-based viewing
- D. Band selection
Answer: A
NEW QUESTION # 32
You require 802.11ac capture solution. You want to capture using native operating system tools if possible.
What operating system has built-in ability to capture 802.11ac frames assuming it is running on the appropriate laptop hardware?
- A. Windows 7
- B. Windows 8.1
- C. Mac OS X
- D. Windows 10
Answer: C
Explanation:
References:
NEW QUESTION # 33
What is the function of 802.11 Management frames?
- A. Communicate configuration changes between WLAN controller and APs
- B. Manage the flow of data
- C. Prioritize network administration traffic
- D. Manage the BSS
Answer: D
Explanation:
The function of 802.11 management frames is to manage the BSS. A BSS (Basic Service Set) is a group of STAs (stations) that share a common SSID (Service Set Identifier) and communicate with each other through an AP (access point) or directly in an ad hoc mode. Management frames are one of the three types of 802.11 frames, along with control and data frames. Management frames are used to establish, maintain, and terminate associations between STAs and APs, as well as to advertise and discover BSSs, exchange security information, report errors, and perform other management functions. The other options are not correct, as they are not functions of 802.11 management frames. Prioritizing network administration traffic, communicating configuration changes between WLAN controller and APs, and managing the flow of data are functions of other types of frames or protocols. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 120-121
NEW QUESTION # 34
Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software. When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?
- A. Reassociation
- B. Probe Response
- C. Authentication
- D. 4-Way Handshake
Answer: D
Explanation:
The 4-way handshake is the process that establishes the pairwise transient key (PTK) between the client and the AP in WPA2-PSK. The PTK is derived from the PSK, the SSID, and some random numbers exchanged in the handshake frames. The PTK is used to encrypt and decrypt the data frames between the client and the AP. Therefore, in order to decrypt WPA2-PSK data packets, a protocol analyzer needs to capture the 4-way handshake frames and have the PSK and SSID configured in the analyzer software12 References:
* CWAP-405Study Guide, Chapter 3: 802.11 MAC Layer Frame Formats and Technologies, page 87
* CWAP-405Objectives, Section 3.5: Analyze security exchanges
NEW QUESTION # 35
The network administrator at ABC Engineering has taken a large packet capture from one of their APs running in monitor mode. She has very little knowledge of 802.11 protocols but would like to use the capture file to evaluate the overall health and performance of their wireless network. When she asks your advice, which tool do you recommend she opens the packet capture file with?
- A. Capture visualization tool
- B. Python
- C. WLAN scanner
- D. Spectrum analyzer
Answer: A
Explanation:
A capture visualization tool is a software application that can open a packet capture file and display various graphs, charts, tables, and statistics that illustrate the characteristics and behavior of the wireless network. A capture visualization tool can help a network administrator with little knowledge of 802.11 protocols to evaluate the overall health and performance of their wireless network by providing a visual and intuitive representation of the captured data. A spectrum analyzer is a hardware device that measures the radio frequency signals in a given frequency range and displays their amplitude, frequency, and modulation. A spectrum analyzer can help identify sources of interference and noise in the wireless environment, but it cannot open a packet capture file. Python is a programming language that can be used to write scripts or applications that manipulate or analyze packet capture files, but it requires coding skills and knowledge of
802.11 protocols. A WLAN scanner is a software application that scans for available wireless networks and displays information such as SSID, BSSID, channel, signal strength, security type, and vendor. A WLAN scanner can help discover wireless networks and their basic parameters, but it cannot open a packet capture file345 References:
* CWAP-405Study Guide, Chapter 2: Protocol Analysis, page 63
* CWAP-405Objectives, Section 2.5: Use capture visualization tools
* CWAP-405Study Guide, Chapter 4: Spectrum Analysis and Troubleshooting, page 117
* CWAP-405Objectives, Section 4.1: Use spectrum analysis tools
* CWAP-405Study Guide, Chapter 2: Protocol Analysis, page 33
* CWAP-405Objectives, Section 2.2: Analyze field values
NEW QUESTION # 36
iPerf is a tool used in what category of testing?
- A. Throughput
- B. Name resolution
- C. Connection
- D. Configuration
Answer: A
NEW QUESTION # 37
You are concerned with management overhead in your WLAN. When evaluating the network, you note that each dual-band AP provides for 4 SSIDs in each band with three secure SSIDs and one Open System SSID.
The network runs only 802.11ac APs and uses 20 MHz channels in 2.4 GHz and 400 MHz channels in 5 GHz.
What can you do to reduce the impact of beacon frames on CCI and channel utilization?
- A. Disable SSID broadcasting
- B. Use only 40 MHz channels
- C. Use the same security across all SSIDs
- D. Increase the beacon interval
Answer: A
NEW QUESTION # 38
What action is taken automatically by 802.11 APs and client STAs as the signal strength of the link weakens in order to improve the quality of the RF communications overall?
- A. Antenna gain is increased
- B. Output power is increased
- C. Data rates are reduced
- D. RSSI is increased
Answer: C
NEW QUESTION # 39
You have been asked to recommend a solution for protocol capture of 802.11 frames consisting of 3x3:3
802.11ac communications. The requirement specifies that you gain a general view of a coverage area and does not require that you capture from specific user locations. The solution must be the least expensive practical solution possible that does not disrupt user access to the WLAN and it must be based on enterprise WLAN hardware.
What solution would you recommend so that any coverage area could be monitored on demand?
- A. Install laptop-based protocol analyzer near each AP
- B. Install Wireshark on the Aps natively to allow dynamic capture while serving clients
- C. Install the minimum number of Aps required for coverage and use these Aps for protocol analysis as needed
- D. Install sufficient Aps so that an AP can be taken offline to perform protocol analysis as needed
Answer: B
NEW QUESTION # 40
Which one of the statements regarding the Frame Control field in an 802.11 MAC header is true?
- A. The Frame Control field is used to communicate the duration value
- B. Only Control frames have a Frame Control field
- C. The Frame Control field is always set to 0
- D. The Frame Control field contains subfields, and soma in 1-bit flags
Answer: D
Explanation:
The statement that the Frame Control field contains subfields, and some 1-bit flags is true. The Frame Control field is a 2-byte field in the MAC header that contains information about the type, subtype, and characteristics of a frame. The Frame Control field is divided into several subfields, each with a specific function and length.
Some of these subfields are 1-bit flags, which can be set to 0 or 1 to indicate a certain condition or status. For example, the To DS and From DS subfields are 1-bit flags that indicate whether a frame is destined for or originated from the DS (Distribution System). The other statements are not true, as they do not describe the Frame Control field correctly. All types of frames (management, control, and data) have a Frame Control field, not just control frames. The Frame Control field is not used to communicate the duration value, which is a separate field in the MAC header. The Frame Control field is not always set to 0, as it varies depending on the type, subtype, and characteristics of each frame. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 113-114
NEW QUESTION # 41
When configuring a long-term, forensic packet capture and saving all packets to disk which of the following is not a consideration?
- A. Individual trace file size
- B. Total capture storage space
- C. Analyzer location
- D. Real-time packet decodes
Answer: D
Explanation:
Real-time packet decodes are not a consideration when configuring a long-term, forensic packet capture and saving all packets to disk. Real-time packet decodes are useful for live analysis and troubleshooting, but they consume CPU and memory resources that could affect the performance of the capture process. For a long- term, forensic packet capture, it is more important to consider the analyzer location, the total capture storage space, and the individual trace file size. These factors affect the quality and quantity of the captured packets and the ease of post-capture analysis34 References:
* CWAP-405Study Guide, Chapter 2: Protocol Analysis, page 49
* CWAP-405Objectives, Section 2.1: Configure protocol analyzers
NEW QUESTION # 42
Which common feature of a Spectrum Analyzer would be the best to help you locate a non-802.11 interference source?
- A. Min hold
- B. Device finder
- C. Location filter
- D. Max hold
Answer: B
Explanation:
The device finder is a common feature of a spectrum analyzer that helps locate a non-802.11 interference source. The device finder uses a directional antenna to measure the signal strength of a specific frequency or signal source. By pointing the antenna in different directions, the device finder can indicate the direction and distance of the interference source. The device finder can also filter out other signals that are not related to the interference source. The other options are not correct, as they do not help locate a non-802.11 interference source. Max hold and min hold are features that show the maximum and minimum RF power levels over time, respectively. Location filter is a feature that filters out signals that are not from a specific location or area. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 3: Spectrum Analysis, page 77-78
NEW QUESTION # 43
How does a VoIP Phone, using WMM Power Save, request data frames buffered at the AP?
- A. The VoIP phone sets the More Data bit in the MAC Header to 1
- B. The VoIP phone transmits a trigger frame, which is a QoS Null frame or a QoS Data frame
- C. The VoIP phone transmits a PS-Poll frame
- D. The VoIP phone transmits a WMM Action frame
Answer: B
Explanation:
A VoIP phone, using WMM Power Save, requests data frames buffered at the AP by transmitting a trigger frame, which is a QoS Null frame or a QoS Data frame. WMM Power Save is a power saving mode that allows a STA (station) to conserve battery power by periodically sleeping and waking up. WMM Power Save is based on WMM (Wi-Fi Multimedia), which is a QoS (Quality of Service) enhancement that provides prioritized and differentiated access to the medium for different types of traffic. When a STA sleeps, it cannot receive any data frames from the AP, so it informs the AP of its power save status by setting a bit in its MAC header. The AP then buffers any data frames destined for the sleeping STA until it wakes up. When a STA wakes up, it sends a trigger frame to the AP, indicating its AC (Access Category), which is a logical queue that corresponds to its QoS level. A trigger frame can be either a QoS Null frame or a QoS Data frame, depending on whether it has any payload or not. The AP then responds with one or more data frames from the same AC as the trigger frame, followed by an ACK or BA (Block Acknowledgement) frame from the STA.
The other options are not correct, as they are not used by a VoIP phone using WMM Power Save to request data frames buffered at the AP. A PS-Poll (Power Save Poll) frame is used by a STA using legacy power save mode, not WMM Power Save mode, to request data frames buffered at the AP. A PS-Poll frame does not indicate any AC or QoS information. Setting the More Data bit in the MAC header to 1 does not request any data frames from the AP, but indicates that there are more data frames to be sent by the STA or received by the STA. Transmitting a WMM Action frame does not request any data frames from the AP, but performs various management actions related to WMM features, such as admission control, parameter update, etc. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 7: QoS Analysis, page
198-199
NEW QUESTION # 44
You have captured 802.11 traffic using an adapter that includes the radio tap header. You see several frames often called announcement frames in the capture.
What best describes these types of frames?
- A. They are used to allow a STA to awake from sleep and for no other reason
- B. They are meant to provide information to the network that may result in state changes, but they are not open for rejection
- C. They only include beacon and probe request frames
- D. They only include beacon and probe response frames
Answer: D
NEW QUESTION # 45
You are repairing a misconfiguration in WMM settings on an AP. The aCWmin and aCWmax values were all changed.
What is the default aCWmax for AC_BK?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 46
What is the formula used to calculate the Duration field value in an RTS frame?
- A. RTS Duration field = Data or management frame to be sent duration + CTS duration
- B. RTS Duration field = Data or management to be sent frame duration
- C. RTS Duration field = CTS duration
- D. RTS Duration field = Data or management frame to be sent duration + CTS duration + one ACK duration + three SIFS
Answer: D
NEW QUESTION # 47
You suspect an interfere may exist in a BSS that is experiencing sporadic problems. You want to identify and locate the device. The actual device identify is not known.
What tool should be used for this purpose?
- A. Cable tester
- B. Throughput tester
- C. Protocol analyzer
- D. Spectrum analyzer
Answer: D
NEW QUESTION # 48
You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames): 1) 802.11 Probe Request and 802.11 Probe Response 2) 802.11 Auth and another 802.11 Auth 2) 802.11 Assoc Req and 802.11 Assoc Rsp 4) EAPOL-Start 5) EAP Request and EAP Response 6) EAP Request and EAP Response 7) EAP Request and EAP Response 8) EAP Request and EAP Response 9) EAP Request and EAP Response 10) EAP Success 19) EAPOL-Key (4 frames in a row) What are you seeing in the capture file?
- A. 802.1X with Dynamic WEP
- B. WPA2-Personal authentication
- C. WPA2-Enterprise authentication
- D. Wi-Fi Protected Setup with PIN
Answer: C
NEW QUESTION # 49
In the 2.4 GHZ band, what data rate are Probe Requests usually sent at from an unassociated STA?
- A. 6 Mbps
- B. The minimum basic rate
- C. MCS 0
- D. 1 Mbps
Answer: B
Explanation:
In the 2.4 GHz band, probe requests are usually sent at the minimum basic rate from an unassociated STA. A probe request is a type of management frame that is transmitted by a STA to discover available BSSs in its vicinity. A probe request can be sent on one or more channels in either passive or active scanning mode. In passive scanning mode, a STA listens for beacon frames from APs on each channel. In active scanning mode, a STA sends probe requests on each channel and waits for probe responses from APs. A probe request is usually sent at the minimum basic rate, which is the lowest data rate among the supported rates that is required for all STAs to join and communicate with a BSS. The minimum basic rate can vary depending on the configuration of each BSS, but it is typically one of these values: 1 Mbps, 2 Mbps, 5.5 Mbps, or 11 Mbps in the 2.4 GHz band. The other options are not correct, as they do not reflect how probe requests are usually sent in the 2.4 GHz band. MCS 0 is a modulation and coding scheme used by 802.11n/ac devices in either band, but it is not a data rate per se. 6 Mbps is a data rate used by OFDM devices in either band, but it is not usually configured as a minimum basic rate in the 2.4 GHz band. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 123-124
NEW QUESTION # 50
You are troubleshooting a client that is experiencing slow WLAN performance. As part of the troubleshooting activity, you start a packet capture on your laptop close to the client device. While analyzing the packets, you suspect that you have not captured all packets transmitted by the client. By analyzing the trace file, how can you confirm if you have missing packets?
- A. Retransmission are an indication of missing packets
- B. Protocol Analyzers show the number of missing packets in their statistics view
- C. The missing packets will be shown as CRC errored packets
- D. Look for gaps in the sequence number in MAC headers.
Answer: D
Explanation:
One way to confirm if you have missing packets in your packet capture is to look for gaps in the sequence number in MAC headers. The sequence number is a 12-bit field in the MAC header that is used to identify and order data frames within a traffic stream. The sequence number is incremented by one for each new data frame transmitted by a STA, except for retransmissions, fragments, and control frames. The sequence number can range from 0 to 4095, and then wraps around to 0. If you see a jump or a gap in the sequence number between two consecutive data frames from the same STA, it means that you have missed some packets in between. The other options are not correct, as they do not confirm if you have missing packets in your packet capture. CRC errored packets are packets that have been corrupted during transmission and have failed the error detection check. Protocol analyzers may show the number of CRC errored packets in their statistics view, but not the number of missing packets. Retransmissions are an indication of packet loss or collision, but not necessarily of missing packets in your capture. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 114-115
NEW QUESTION # 51
You are using a Wireless Aggregator utility to combine multiple packet captures. One capture exists for each of channels 1, 6 and 11.
What kind of troubleshooting are you likely performing with such a tool?
- A. Interference source location.
- B. Wireless adapter failure analysis.
- C. Narrowband DoS attack detection.
- D. Fast secure roaming problems.
Answer: A
NEW QUESTION # 52
Prior to a retransmission what happens to the CWmax value?
- A. Set to the value of the AIFSN
- B. Reset to 0
- C. Increases by 1
- D. Doubles and increases by 1
Answer: D
Explanation:
Before a retransmission, the CWmax (Contention Window maximum) value doubles and increases by 1. The CWmax is a parameter that determines the upper limit of the random backoff time that a STA (station) has to wait before attempting to access the medium. The random backoff time is chosen from a range of values between CWmin (Contention Window minimum) and CWmax. The CWmin and CWmax values depend on the AC (Access Category) of the traffic and the PHY type of the STA. If a transmission fails due to a collision or an error, the STA has to retransmit the frame after waiting for another random backoff time. However, to reduce the probability of another collision, the STA increases its CWmax value by doubling it and adding 1.
This increases the range of possible backoff values and spreads out the STAs more evenly. The STA resets its CWmax value to its original value after a successful transmission or after reaching a predefined limit. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 7: QoS Analysis, page
196-197
NEW QUESTION # 53
......
New (2026) CWNP CWAP-405 Exam Dumps: https://www.test4cram.com/CWAP-405_real-exam-dumps.html
CWAP-405 Practice Dumps - Verified By Test4Cram Updated 120 Questions: https://drive.google.com/open?id=1GfGFifwngjrdqKI4TGYX7CkOqGhRCmAK