CWNA-109 Certified Wireless Network Administrator Questions and Answers

Shared Key Authentication is a security solution that was defined in the original 802.11 standard as an alternative to Open System Authentication, which does not provide any security at all. Shared Key Authentication uses WEP (Wired Equivalent Privacy) to encrypt and authenticate data frames between the client station and the AP. However, WEP has been proven to be extremely vulnerable to various attacks that can easily crack the encryption key and compromise the network security. Therefore, Shared Key Authentication is deprecated in the 802.11 standard and should never be used in any modern WLAN deployment . References: [CWNA-109 Study Guide], Chapter 10: Wireless LAN Security, page 401; [CWNA-109 Study Guide], Chapter 10: Wireless LAN Security, page 391; [Wikipedia], Wired Equivalent Privacy.

When performing a post-deployment validation survey for voice over Wi-Fi (VoWiFi), an action that must be performed is Application analysis with an active phone call on a VoWiFi handset. Application analysis is a method of testing the performance of a specific application over the WLAN by measuring parameters such as throughput, latency, jitter, packet loss, MOS score, and R-value. Application analysis with an active phone call on a VoWiFi handset can help to evaluate the quality of service (QoS) and user experience of VoWiFi calls over the WLAN. It can also help to identify any issues or bottlenecks that may affect VoWiFi calls such as interference, roaming delays, or insufficient coverage. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 549; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 519.

The response that you should give to your manager’s suggestion of implementing the security practices of disabling the broadcasting of the SSID in Beacons and configuring the access points not to respond to Probe Request frames that have a null SSID field is that any 802.11 protocol analyzer can see the SSID in clear text in frames other than Beacons frames. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames. The SSID (Service Set Identifier) is a human-readable name that identifies a WLAN and allows users to connect to it. The SSID is transmitted in clear text in several types of 802.11 frames, such as Beacon frames, Probe Request frames, Probe Response frames, Association Request frames, Association Response frames, Reassociation Request frames, and Reassociation Response frames. Some people may think that hiding the SSID can improve the security of the WLAN by making it invisible to potential intruders. However, this is not true, as hiding the SSID only removes it from Beacon frames and Probe Response frames that have a null SSID field. The SSID is still present in other types of frames that can be easily captured and analyzed by any 802.11 protocol analyzer or wireless scanner tool. Therefore, hiding the SSID does not provide any real security benefit and may even cause some compatibility and performance issues for legitimate users. References: 1, Chapter 4, page 133; 2, Section 4.1

 VSWR stands for Voltage Standing Wave Ratio, which is a measure of how well the impedance of the RF cable and connectors matches the impedance of the transmitter and the antenna. Impedance is the opposition to the flow of alternating current in an RF circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. A perfect impedance match would have a VSWR of 1:1, meaning that all the power is transferred from the transmitter to the antenna, and none is reflected back. However, in reality, there is always some degree of mismatch, which causes some power to be reflected back to the transmitter, creating standing waves along the cable. This reduces the efficiency and performance of the wireless system, and can also damage the transmitter. Excessive VSWR can be caused by using poor quality or damaged cables and connectors, or by using components that have different impedance ratings123. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 90; CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 86; CWNP website, CWNA Certification.

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchange protocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 297.

FT (Fast Transition) is an IEEE 802.11 standard method for fast roaming. FT is defined in the IEEE 802.11r amendment and is also known as Fast BSS Transition (FBT) or Fast Secure Roaming. FT is a feature that allows a client station to quickly switch from one AP to another within the same ESS (Extended Service Set) without having to re-authenticate and re-associate with each AP. This reduces the latency and packet loss that may occur during roaming, thus improving the user experience and maintaining the security of the connection. FT works by using pre-authentication and key caching mechanisms that allow the client station and the APs to exchange security information before the actual roaming occurs. This way, when the client station decides to roam to a new AP, it can use a fast reassociation request and response that contain only a few fields, instead of a full authentication and association exchange that require more time and data. References: 1, Chapter 9, page 367; 2, Section 6.3

Sensors should be deployed in critical areas where WLAN performance must be high for best results when using a WLAN monitoring solution that utilizes distributed sensor devices. A WLAN monitoring solution is a system that collects, analyzes, and reports on the status and performance of a WLAN. A WLAN monitoring solution can use different methods to gather data from the WLAN, such as embedded software agents, external hardware probes, or distributed sensor devices. Distributed sensor devices are dedicated devices that are deployed throughout the WLAN coverage area to monitor the wireless traffic and environment. Distributed sensor devices can perform various functions, such as scanning the spectrum, capturing wireless frames, measuring signal quality, detecting rogue access points, testing connectivity, and generating alerts. Distributed sensor devices can provide more accurate and comprehensive data than other methods, but they also require more planning and deployment costs. Therefore, it is important to deploy sensors strategically in critical areas where WLAN performance must be high, such as high-density zones, high-priority applications, or high-security locations. By deploying sensors in critical areas, the WLAN monitoring solution can ensure optimal WLAN performance and reliability in those areas and identify and resolve any issues or problems that may arise. The other options are not the best places to deploy sensors for best results. Deploying sensors in switching closets is not effective because sensors need to be close to the wireless medium to monitor it properly. Deploying sensors every 5 meters and alongside each AP is not efficient because sensors may overlap or interfere with each other and cause unnecessary redundancy or complexity. Deploying sensors above the plenum on each floor is not practical because sensors may not capture the wireless traffic and environment accurately due to attenuation or reflection from the ceiling materials or objects. References: CWNA-109 Study Guide, Chapter 14: Troubleshooting Wireless LANs, page 4831

According to the CWNA Official Study Guide (CWNA-109), Chapter 4: Antennas and Accessories, antenna gain is a measure of how effectively an antenna focuses energy in a particular direction. When a passive antenna with a higher gain is used, it does not increase the transmitted power — instead, it focuses the RF energy more narrowly, creating a stronger signal in a smaller area.

“As the gain of an antenna increases, the beamwidth of the antenna decreases. This is because a higher gain antenna focuses energy more narrowly in one direction. While this increases range in that direction, it reduces coverage in other directions.”

— CWNA-108 Study Guide, Chapter 4, Antenna Concepts and Beamwidth, p. 165–166

Thus, when you replace an antenna with one of higher passive gain, the beamwidth decreases while range in the direction of focus increases.

VHT stands for Very High Throughput, which is a physical layer (PHY) specification that supports the 5 GHz frequency band and supports 80 MHz channels. VHT is used by the IEEE 802.11ac standard, which is also known as Wi-Fi 5. VHT allows for higher data rates and more spatial streams than the previous HT (High Throughput) PHY, which is used by the IEEE 802.11n standard, also known as Wi-Fi 4. HT supports the 2.4 GHz and 5 GHz bands, but only supports up to 40 MHz channels12

The other options are not correct because:

ERP (option C) stands for Extended Rate PHY, which is a physical layer specification that supports the 2.4 GHz frequency band and supports up to 20 MHz channels. ERP is used by the IEEE 802.11g standard, which is also known as Wi-Fi 3. ERP allows for higher data rates than the previous DSSS (Direct Sequence Spread Spectrum) PHY, which is used by the IEEE 802.11b standard, also known as Wi-Fi 234

OFDM (option D) stands for Orthogonal Frequency Division Multiplexing, which is a modulation technique that divides a signal into multiple subcarriers that are spaced orthogonally to each other. OFDM is not a physical layer specification, but a common feature of many PHY specifications, including ERP, HT, and VHT. OFDM allows for higher spectral efficiency and robustness against multipath interference than the previous CCK (Complementary Code Keying) modulation technique used by DSSS34

A laptop-based spectrum analyzer with a directional antenna is the best solution for locating a non-802.11 device that is suspected of causing interference on the WLAN. A spectrum analyzer is a device or a software application that can measure and display the frequency spectrum of electromagnetic signals in a given range. A spectrum analyzer can show the amplitude, frequency, bandwidth, modulation, and other characteristics of different signals in the spectrum, which can help identify their sources and types. A spectrum analyzer can also detect non-802.11 devices that may cause interference on the WLAN, such as microwave ovens, cordless phones, Bluetooth devices, or radar systems. A laptop-based spectrum analyzer is a software application that runs on a laptop computer and uses an external USB adapter as its RF interface. A laptop-based spectrum analyzer has the advantage of being portable, flexible, and cost-effective compared to a hardware-based spectrum analyzer. A directional antenna is an antenna that radiates or receives RF signals more strongly in one direction than in others. A directional antenna has a high gain and a narrow beamwidth, which means it can focus the RF energy in a specific direction and reduce the interference from other directions. A directional antenna can also increase the range and sensitivity of the RF signal detection. To locate a non-802.11 device that is causing interference on the WLAN, a laptop-based spectrum analyzer with a directional antenna can be used to perform a technique called RF hunting or triangulation. This technique involves pointing the directional antenna in different directions and observing the signal strength and characteristics of the interfering device on the spectrum analyzer. By moving around and changing the direction of the antenna, the location of the interfering device can be estimated based on where the signal strength is highest and most consistent. References: 1, Chapter 7, page 282; 2, Section 4.3

The center frequency of channel 4 in the 2.4 GHz band is 2.427 GHz (2427 MHz). The center frequency of a channel is the midpoint of its frequency range, where the signal strength is highest and most concentrated. The center frequency of channel 1 in the 2.4 GHz band is 2.412 GHz (2412 MHz), as given in the question. The center frequency of each subsequent channel is obtained by adding 5 MHz to the previous channel’s center frequency, since the channels are spaced 5 MHz apart from each other in this band. Therefore, to find the center frequency of channel 4, we need to add 15 MHz (5 MHz x 3) to the center frequency of channel 1:

2.412 GHz + 0.015 GHz = 2.427 GHz

Alternatively, we can use a formula to calculate the center frequency of any channel in the 2.4 GHz band:

Center frequency (GHz) = 2.407 + (0.005 x Channel number)

Using this formula for channel 4, we get:

Center frequency (GHz) = 2.407 + (0.005 x 4)

Center frequency (GHz) = 2.407 + 0.02

Center frequency (GHz) = 2.427 References: 1, Chapter 3, page 85; 2, Section 3.2

A POE device that requires 47 W of power should use the 802.3bt specification. This is because 802.3bt is the latest POE standard that supports up to 90 W of power delivery over four pairs of wires in an Ethernet cable. The previous POE standards, such as 802.3af and 802.3at, only support up to 15.4 W and 30 W of power delivery over two pairs of wires in an Ethernet cable, respectively. Therefore, they are not sufficient for powering a device that requires 47 W of power. The 802.11at specification does not exist; it is a typo or confusion with the 802.3at specification. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2431

Channel 144 is a new channel that was added to the 5 GHz band by the 802.11ac amendment, which defines the VHT (Very High Throughput) PHY for WLANs. Channel 144 has a center frequency of 5720 MHz and a bandwidth of 20 MHz. It can also be combined with adjacent channels to form wider channels of 40 MHz, 80 MHz, or 160 MHz. Channel 144 is available in some regions, such as North America and Europe, but not in others, such as Japan and China . References: [CWNA-109 Study Guide], Chapter 3: Antennas and Accessories, page 121; [CWNA-109 Study Guide], Chapter 3: Antennas and Accessories, page 115; [Wikipedia], List of WLAN channels.

The unit of measurement that is an absolute unit and is used to quantify received signal power levels on a logarithmic scale is dBm. dBm stands for decibel-milliwatt and represents the power level relative to 1 milliwatt (mW). dBm is an absolute unit because it has a fixed reference point and does not depend on the input power level. dBm is used to measure the received signal power levels on a logarithmic scale because it can express large variations in power levels with small numbers and make calculations easier. For example, a 10 dB increase in power level means a 10-fold increase in power, and a 20 dB increase means a 100-fold increase in power. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 66; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 56.

A high-density deployment is a wireless network that is designed to support a large number of users and devices in a relatively small area. This type of deployment is often used in enterprise environments, such as offices, schools, and hospitals.

The use of semi-directional antennas in the deployment described in the question is a good indication that it is a high-density deployment. Semi-directional antennas can be used to focus the signal from an access point in a specific direction. This can help to reduce interference and improve performance in high-density environments.

The other answer choices are less likely to be correct for the following reasons:

SOHO (small office/home office) deployments are typically smaller and less complex than high-density deployments.

Residential deployments are typically even smaller and less complex than SOHO deployments.

Standard office deployments may be high-density, but they may also be lower-density.

It is important to note that the type of deployment is not determined solely by the output power of the access points. However, the use of 10 mW of output power on the 2.4 GHz radios and 20 mW of output power on the 5GHz radios is also consistent with a high-density deployment.

Here are some additional tips for deploying a high-density wireless network:

Use a site survey to determine the optimal placement of access points.

Configure the access points to use non-overlapping channels.

Use semi-directional or directional antennas to focus the signal and reduce interference.

Implement a wireless intrusion prevention system (WIPS) to detect and mitigate rogue access points and other security threats.

Elevators are a common building item that frequently causes RF shadow and must be accounted for in coverage plans. RF shadow is a term that describes an area where wireless signals are blocked or significantly weakened by an obstacle or an object that absorbs or reflects RF energy. RF shadow can cause lack of coverage or poor performance in a WLAN because wireless devices in those areas may not be able to communicate with access points or other devices. RF shadow can be mitigated by adjusting access point placement, antenna orientation, transmit power level, or channel selection to avoid or overcome the obstacle or object that causes it. Elevators are a common building item that frequently causes RF shadow because they are made of metal and they move up and down within a shaft. Metal is a material that has high attenuation and reflection values, which means it can block or bounce off wireless signals very effectively. A moving elevator can create dynamic RF shadow that changes depending on its position and direction. Therefore, elevators must be accounted for in coverage plans to ensure adequate WLAN coverage and performance throughout the facility. The other options are not common building items that frequently cause RF shadow or must be accounted for in coverage plans. Wooden doors are not likely to cause RF shadow because they are made of wood, which is a material that has low attenuation and reflection values, which means it can pass through or slightly weaken wireless signals. Carpeted floors are not likely to cause RF shadow because they are made of fabric, which is a material that has low attenuation and reflection values, which means it can pass through or slightly weaken wireless signals. Cubicle partitions are not likely to cause RF shadow because they are made of thin plastic or cardboard, which are materials that have low attenuation and reflection values, which means they can pass through or slightly weaken wireless signals. References: CWNA-109 Study Guide, Chapter 13: Wireless LAN Site Surveys - Types & Processes , page 433

The beamwidth of an RF antenna is the angular measure of how wide the main lobe of radiation is. The main lobe is the area where the signal strength is highest and most concentrated. The beamwidth is calculated at the points where the main lobe decreases power by 3 dB, which means it is half of the maximum power. The beamwidth can be measured in both horizontal and vertical planes, depending on how the antenna is oriented. The horizontal beamwidth is also called azimuth, while the vertical beamwidth is also called elevation. The beamwidth patterns on an antenna polar chart indicate how the RF energy is distributed in different directions. References: 1, Chapter 2, page 66; 2, Section 2.3

The scenario described suggests that while the Access Point (AP) is capable of 802.11ax (Wi-Fi 6) with four spatial streams, the clients are only achieving data rates typical of 802.11n (Wi-Fi 4) devices, which indicates that the clients are likely 802.11n devices. Here's why this is the most plausible explanation:

802.11n Limitations: Devices that adhere to the 802.11n standard have lower maximum data rates compared to 802.11ax devices due to differences in technology such as modulation, spatial streams, and channel bandwidth. An 802.11n device with a single spatial stream operating on a 20 MHz channel can achieve a maximum data rate of 72.2 Mbps. Even with two spatial streams under ideal conditions, this would only double to approximately 144.4 Mbps, which is close to the 150 Mbps mentioned.

Spatial Stream Capability: The fact that the AP supports four spatial streams suggests it can achieve much higher data rates with 802.11ax clients that also support multiple spatial streams. However, if the clients are 802.11n devices, they may not be capable of using more than two spatial streams, and many earlier 802.11n devices were limited to just one.

The other options are less likely to be the primary cause based on the information provided:

B. Two Stream 802.11ax Clients: If the clients were 802.11ax with only two spatial streams, they would likely achieve higher data rates than 150 Mbps due to the efficiency improvements in 802.11ax.

C. Contention and D. Non-Wi-Fi Interference: While these could affect performance, they would not inherently limit clients to 150 Mbps, especially in the context of an 802.11ax environment where mechanisms to handle interference and contention are more advanced.

In the 2.4 GHz frequency band used for 802.11 wireless networks, the channel bandwidth is typically 20 MHz, but the actual frequency spread of each channel is about 22 MHz due to the modulation techniques used. This spread causes overlap between adjacent channels, which can lead to interference and degrade network performance. To avoid this, it's essential to use non-overlapping channels.

The three non-overlapping channels in the 2.4 GHz band are 1, 6, and 11. Each of these channels is spaced sufficiently apart to avoid interference with each other:

Channel 1: Centered at 2.412 GHz.

Channel 6: Centered at 2.437 GHz.

Channel 11: Centered at 2.462 GHz.

Given the options provided, option C (1 and 5) is the closest to a pair of non-overlapping channels, although in practice, channel 5 would still cause some interference with channel 1 due to the 22 MHz spread. The ideal choice for non-overlapping channels would be any two channels among 1, 6, and 11, but this is not an option provided. Therefore, within the given options, 1 and 5 are the best choice, understanding that in a real-world scenario, 1 and 6 or 6 and 11 would be preferred to avoid overlap.

In addition to coverage analysis results, what should be included in a post-deployment site survey report to ensure WLAN users experience acceptable performance is Capacity analysis results. Capacity analysis is a method of testing the ability of the WLAN to support the expected number and type of users, devices, and applications. Capacity analysis can help to determine the optimal number and placement of access points, the appropriate channel and power settings, the required QoS policies, and the expected throughput and latency levels. Capacity analysis results can help to verify that the WLAN meets the performance requirements and service level agreements (SLAs) of the organization. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 548; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 518.

Cellular/LTE/5G is the best method for implementing a network backhaul for communications across the Internet in a remote area that is affected by a natural disaster. This is because cellular/LTE/5G networks are wireless and do not depend on physical infrastructure that may be damaged or unavailable in such scenarios. Cellular/LTE/5G networks also offer high-speed data transmission and wide coverage area, which are essential for emergency response operations. 802.11 bridging to the response team headquarters is not feasible because it requires line-of-sight and has limited range. Turning up the output power of the WLAN at the response team headquarters is not effective because it may cause interference and does not guarantee reliable connectivity. Temporary wired DSL is not practical because it requires installing cables and equipment that may not be available or accessible in a remote area. References: CWNA-109 Study Guide, Chapter 7: Wireless LAN Topologies, page 2031

In the 802.11 wireless networking protocols, when a client station sends a broadcast probe request frame with a wildcard SSID (Service Set Identifier), it is essentially asking for any nearby access points (APs) to identify themselves. The way APs respond to such a probe request is governed by standard 802.11 behavior, which includes:

Probe Request Handling: Upon receiving a broadcast probe request, each AP that can serve the client prepares a probe response. The response includes information about the AP, such as its SSID, supported data rates, and other capabilities.

Contention-Based Mechanism: Wireless networks use a contention-based mechanism (CSMA/CA - Carrier Sense Multiple Access with Collision Avoidance) for medium access. Each AP must wait for a clear channel and win the contention process before it can send its probe response.

Independent Responses: Each AP operates independently in responding to the probe request. There is no coordination between APs to decide which one responds first or at all, leading to multiple APs sending probe responses, each after winning the contention for the medium.

Option A accurately reflects this process, indicating that each AP prepares and sends a probe response in turn, contingent upon winning the medium contention. The other options suggest mechanisms (such as coordination with a DHCP server or simultaneous responses after a Short Interframe Space (SIFS)) that do not align with standard 802.11 procedures for handling broadcast probe requests.

An access point is configured by a WLAN controller in the management plane of the three networking planes. The management plane is responsible for the configuration, administration, and monitoring of network devices, such as access points, switches, routers, and controllers. The WLAN controller communicates with the access point using a management protocol, such as CAPWAP or SNMP, to send configuration commands and receive status information. The control plane is responsible for the routing, switching, and forwarding of network traffic, such as data frames and control frames. The WLAN controller may also participate in the control plane by performing functions such as authentication, encryption, roaming, and load balancing. The security plane is responsible for the protection of network devices and data from unauthorized access, modification, or disclosure. The WLAN controller may also participate in the security plane by implementing features such as firewall, VPN, IDS/IPS, and WIPS. The data plane is responsible for the transmission and reception of user data, such as voice, video, or web traffic. The WLAN controller may or may not participate in the data plane depending on the architecture of the WLAN. In some cases, the access point forwards the user data directly to the wired network without involving the WLAN controller (distributed data forwarding). In other cases, the access point tunnels the user data to the WLAN controller before forwarding it to the wired network (centralized data forwarding). References: CWNA-109 Study Guide, Chapter 9: Wireless LAN Architecture, page 279

Weak signal strength is the likely cause of the low data rate issue for the client that has a signal strength of -84 dBm and a noise floor of -96 dBm. The client is an 802.11ac client and connects to an 802.11ac AP. Both the client and AP are 2x2:2 devices. Signal strength is the measure of how strong the RF signal is at the receiver. Signal strength can affect the reliability and performance of the wireless connection, as well as the data rate and throughput of the traffic. The higher the signal strength, the better the signal quality and the higher the data rate. The lower the signal strength, the worse the signal quality and the lower the data rate.

The data rate of an 802.11ac connection depends on several factors, such as channel bandwidth, modulation and coding scheme (MCS), spatial streams, guard interval, and beamforming. However, these factors are also influenced by the signal strength, as they require a certain signal-to-noise ratio (SNR) to operate properly. SNR is the ratio of the signal strength to the noise floor, which is the measure of the background noise or interference in the RF environment. The higher the SNR, the more robust and efficient the communication. The lower the SNR, the more prone and vulnerable to errors and retries.

According to the CWNA Official Study Guide , Table 3.7, page 112, an 802.11ac connection with a channel bandwidth of 80 MHz, an MCS of 9, two spatial streams, a short guard interval, and no beamforming can achieve a maximum data rate of 867 Mbps. However, this data rate requires a minimum SNR of 30 dB to maintain a sufficient signal quality. If the signal strength is -84 dBm and the noise floor is -96 dBm, then the SNR is only 12 dB (-84 dBm - (-96 dBm) = 12 dB), which is far below the required SNR for this data rate. Therefore, the data rate will drop significantly to match the lower SNR and signal quality.

To solve this problem, the signal strength should be increased to improve the SNR and data rate. This can be done by adjusting the output power or channel assignment of the AP or client, relocating or reorienting some APs or antennas to reduce attenuation or interference, updating or replacing some faulty or outdated hardware or software components, etc. References: , Chapter 3, page 112; , Section 3.2

MU-MIMO capabilities of the bridges are not a factor considered when calculating the Link Budget for an outdoor point-to-point WLAN bridge link. The Link Budget is a calculation of the expected signal strength at the receiver based on various factors that affect the RF transmission. Some of these factors are operating frequency, transmit power, receive antenna gain, free space path loss, cable loss, connector loss, and environmental loss. MU-MIMO stands for Multi-User Multiple Input Multiple Output, which is a technology that allows multiple devices to communicate simultaneously using multiple spatial streams. MU-MIMO is not relevant for a point-to-point link, where there are only two devices involved. References: 1, Chapter 2, page 59; 2, Section 2.2

Airtime Utilization is a per-channel statistic that defines what percentage of the channel is currently being used, and what percentage is therefore free. Airtime usage can come from: Data traffic to and from client devices. Interference from WiFi and non-WiFi sources. Management overhead from APs and client devices. https://wyebot.com/2019/06/06/understanding-airtime-utilization/

https://7signal.com/802-11ac-migration-part-2-whats-nobodys-telling-you-about-80mhz-and-160mhz-channel-bonding

The clients are all 802.11n STAs or lower is the likely cause of this behavior. If a WLAN with 100 802.11ac access points is configured to use 80 MHz channels, but only 40 MHz communications are seen in a particular BSS, it means that the clients in that BSS do not support 80 MHz channels. This could be because they are using older standards, such as 802.11n or lower, that do not support 80 MHz channels. Alternatively, they could be using newer standards, such as 802.11ac or ax, but have their channel width settings limited to 40 MHz or lower due to device capabilities or configuration options. In either case, the AP will adapt to the client’s channel width and use only 40 MHz of the 80 MHz allocated bandwidth to communicate with them. This will reduce the potential throughput and efficiency of the WLAN. References: , Chapter 3, page 111; , Section 3.2

CCI is still a possibility in this network because the client devices connected to one of the channel 1 APs will transmit frames that reach the other channel 1 AP as well as clients connected to the other channel 1 AP. CCI stands for co-channel interference, which is a type of interference that occurs when two or more devices transmit on the same channel within range of each other. CCI reduces performance and capacity because it causes contention and collisions on the wireless medium, which leads to retransmissions and delays. CCI can be mitigated by increasing physical separation between devices using the same channel or by reducing transmit power levels to limit coverage area. In this scenario, three access points are used within a facility. One access point is on channel 11 and the other two are on channel 1. The two access points using channel 1 are on either side of the access point using channel 11 and sufficiently apart so that they do not interfere with each other when they transmit frames. However, this does not prevent CCI from occurring between their client devices that are connected on channel 1. For example, if a client device connected to one of the channel 1 APs sends a frame to another device on the wired network or on another wireless network (such as an Internet server or a VoIP phone), that frame will be heard by both channel 1 APs as well as any other client devices connected to either of them on channel 1. This will cause CCI because these devices will have to wait for the channel to be clear before they can transmit their own frames. The answer that CCI only occurs in the 5 GHz frequency band is incorrect; CCI can occur in any frequency band where devices use the same channel. The answer that channel 11 loops around and causes CCI with channel 1 is also incorrect; channel 11 does not loop around and it operates in a different frequency band than channel 1. References: CWNA-109 Study Guide, Chapter 5: Radio Frequency Signal and Antenna Concepts, page 147

 A Wi-Fi scanner is a basic tool that can be used to easily locate areas of high co-channel interference. A Wi-Fi scanner is a software application that can run on a laptop, tablet, smartphone, or other device that has a Wi-Fi adapter. A Wi-Fi scanner can scan the wireless environment and display information about the detected access points and client stations, such as their SSID, BSSID, channel, signal strength, security, and data rate. A Wi-Fi scanner can also show the channel utilization and overlap of different access points, which can indicate the level of co-channel interference. Co-channel interference is a type of interference that occurs when multiple access points use the same or adjacent channels within the same coverage area. Co-channel interference can reduce the throughput and performance of the WLAN, as the access points and client stations have to contend for the channel access and avoid collisions. To identify areas of high co-channel interference, a Wi-Fi scanner can be used to measure the signal strength and channel utilization of different access points and compare them with a threshold or a baseline. Alternatively, a Wi-Fi scanner can also use a color-coded heat map to visualize the co-channel interference level in different locations. References: 1, Chapter 7, page 279; 2, Section 4.3

Impedance is the measure of opposition to the flow of alternating current (AC) in a circuit. Impedance mismatch occurs when the impedance of the radio does not match the impedance of the antenna or the cable. This causes some of the transmitted or received signal to be reflected back, resulting in a loss of power and efficiency. The voltage standing wave ratio (VSWR) is a metric that indicates the amount of impedance mismatch in a transmission line. A higher VSWR means a higher impedance mismatch and a lower signal quality. A VSWR of 1:1 is ideal, meaning there is no impedance mismatch and no reflected power. A VSWR of 2:1 means that for every 2 units of forward power, there is 1 unit of reflected power12.

The other options are not correct because they do not affect the VSWR in RF cables. A high gain yagi antenna or a high gain parabolic dish antenna can increase the signal strength and directionality, but they do not cause impedance mismatch in the cable. Radio output power above 100 mW but below 400 mW is within the acceptable range for most WLAN devices and does not cause excessive VSWR in the cable3.

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 289.

 The data rate of a signal is the speed that the data bits in individual 802.11 data frames are sent, but it does not account for the actual amount of data that can be transmitted over time. The throughput of a connection is the flow of information over time, which is affected by various factors such as data encoding, modulation, encryption, airtime utilization, noise levels, interference, etc. Therefore, the throughput is always lower than the data rate. According to one of the web search results1, the actual throughput is normally 60-70 percent of the supported data rates. So, for a connection with a data rate of 150 Mbps, the expected throughput would be around 90-105 Mbps.

The security option for 802.11 networks that supports SAE and requires protected management frames is WPA3. WPA3 stands for Wi-Fi Protected Access version 3 and is the latest security standard for WLANs. WPA3 supports two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. WPA3 also requires protected management frames, which are encrypted frames that prevent spoofing, replay, or denial-of-service attacks on management frames such as deauthentication or disassociation frames. WPA, WPA2, and OWE do not support SAE or require protected management frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 297.