CWNA-109 Certified Wireless Network Administrator Questions and Answers

Granting access to specific network services or resources according to a user profile describes the authorization component of a AAA implementation. AAA stands for Authentication, Authorization, and Accounting, which are three functions that are used to control and monitor access to network resources and services. Authentication is the process of verifying that a user is who he says he is, by using credentials such as username, password, certificate, token, or biometric data. Authorization is the process of granting access to specific network services or resources according to a user profile, which defines the user’s role, privileges, and permissions. Accounting is the process of recording and reporting the usage of network services or resources by a user, such as the duration, volume, type, and location of the access.  AAA can be implemented by using different protocols and servers, such as RADIUS, TACACS+, LDAP, Kerberos, or Active Directory.  References:   1 , Chapter 11, page 449;  2 , Section 7.1

An isotropic radiator is a theoretical point source of electromagnetic radiation that radiates equally in all directions. It has no physical dimensions and no preferred direction of radiation.  It is used as a reference for antenna gain because it represents the ideal case of a perfect omnidirectional antenna 1 2

Antenna gain is a measure of how well an antenna concentrates its radiated power in a certain direction. It is expressed in decibels (dB) relative to a reference antenna.  When the reference antenna is an isotropic radiator, the antenna gain is denoted by dBi, which stands for decibels relative to isotropic 1 2

For example, an antenna with a gain of 3 dBi means that it radiates 3 dB more power in its main direction than an isotropic radiator would.  Conversely, an antenna with a gain of -3 dBi means that it radiates 3 dB less power in its main direction than an isotropic radiator would 1 2

A BSS (Basic Service Set) is a WLAN use case that represents an 802.11-based network that uses an AP (Access Point) and has several connecting clients. The AP acts as a central point of coordination and communication for the clients, which can include iPhones, iPads, laptops, desktops, or any other devices that have Wi-Fi capabilities. A BSS can be identified by a unique BSSID (Basic Service Set Identifier), which is usually the MAC address of the AP’s radio interface. A BSS can also be associated with an SSID (Service Set Identifier), which is a human-readable name that identifies the network.  References:  , Chapter 1, page 23; , Section 1.1

https://7signal.com/802-11ac-migration-part-2-whats-nobodys-telling-you-about-80mhz-and-160mhz-channel-bonding

The clients are all 802.11n STAs or lower is the likely cause of this behavior. If a WLAN with 100 802.11ac access points is configured to use 80 MHz channels, but only 40 MHz communications are seen in a particular BSS, it means that the clients in that BSS do not support 80 MHz channels. This could be because they are using older standards, such as 802.11n or lower, that do not support 80 MHz channels. Alternatively, they could be using newer standards, such as 802.11ac or ax, but have their channel width settings limited to 40 MHz or lower due to device capabilities or configuration options. In either case, the AP will adapt to the client’s channel width and use only 40 MHz of the 80 MHz allocated bandwidth to communicate with them. This will reduce the potential throughput and efficiency of the WLAN.  References:  , Chapter 3, page 111; , Section 3.2

The error in administration that could be the cause of this security concern is that  HTTP is in use instead of HTTPS . HTTP is an unencrypted protocol that transfers data in plain text over the network. This means that anyone who captures the traffic can see the HTML code of the Web pages used for access point management, as well as any sensitive information such as passwords or configuration settings. HTTPS is an encrypted protocol that uses SSL/TLS to secure the data transmission between the Web browser and the Web server. HTTPS prevents anyone from snooping on or tampering with the Web traffic. Therefore, HTTPS should always be used for Web based management of wireless access points, especially in autonomous mode where there is no centralized controller to enforce security policies.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 431; [HTTP vs HTTPS: What’s The Difference And Why Should You Care?] .

An immediate concern that you note after hearing this information is that  the power budget in the edge switches must be carefully planned and monitored based on the number of supported PoE devices . PoE stands for Power over Ethernet and is a technology that allows Ethernet switches to deliver power along with data to devices such as VoIP phones and 802.11 access points. PoE devices are classified into different classes based on their power consumption and output. The edge switches have a limited power budget that determines how many PoE devices they can support simultaneously. If the power budget is exceeded, some PoE devices may not receive enough power or may shut down unexpectedly. Therefore, it is important to plan and monitor the power budget in the edge switches based on the number and class of PoE devices connected to them. Using Ether-channel, placing switches in optimal locations, or avoiding distortion are not immediate concerns related to PoE devices.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 234; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 224.

In the 2.4 GHz frequency band used for 802.11 wireless networks, the channel bandwidth is typically 20 MHz, but the actual frequency spread of each channel is about 22 MHz due to the modulation techniques used. This spread causes overlap between adjacent channels, which can lead to interference and degrade network performance. To avoid this, it ' s essential to use non-overlapping channels.

The three non-overlapping channels in the 2.4 GHz band are 1, 6, and 11. Each of these channels is spaced sufficiently apart to avoid interference with each other:

Channel 1 : Centered at 2.412 GHz.

Channel 6 : Centered at 2.437 GHz.

Channel 11 : Centered at 2.462 GHz.

Given the options provided, option C (1 and 5) is the closest to a pair of non-overlapping channels, although in practice, channel 5 would still cause some interference with channel 1 due to the 22 MHz spread. The ideal choice for non-overlapping channels would be any two channels among 1, 6, and 11, but this is not an option provided. Therefore, within the given options, 1 and 5 are the best choice, understanding that in a real-world scenario, 1 and 6 or 6 and 11 would be preferred to avoid overlap.

The scenario described suggests that while the Access Point (AP) is capable of 802.11ax (Wi-Fi 6) with four spatial streams, the clients are only achieving data rates typical of 802.11n (Wi-Fi 4) devices, which indicates that the clients are likely 802.11n devices. Here ' s why this is the most plausible explanation:

802.11n Limitations : Devices that adhere to the 802.11n standard have lower maximum data rates compared to 802.11ax devices due to differences in technology such as modulation, spatial streams, and channel bandwidth. An 802.11n device with a single spatial stream operating on a 20 MHz channel can achieve a maximum data rate of 72.2 Mbps. Even with two spatial streams under ideal conditions, this would only double to approximately 144.4 Mbps, which is close to the 150 Mbps mentioned.

Spatial Stream Capability : The fact that the AP supports four spatial streams suggests it can achieve much higher data rates with 802.11ax clients that also support multiple spatial streams. However, if the clients are 802.11n devices, they may not be capable of using more than two spatial streams, and many earlier 802.11n devices were limited to just one.

The other options are less likely to be the primary cause based on the information provided:

B. Two Stream 802.11ax Clients : If the clients were 802.11ax with only two spatial streams, they would likely achieve higher data rates than 150 Mbps due to the efficiency improvements in 802.11ax.

C. Contention and D. Non-Wi-Fi Interference : While these could affect performance, they would not inherently limit clients to 150 Mbps, especially in the context of an 802.11ax environment where mechanisms to handle interference and contention are more advanced.

PoE stands for Power over Ethernet, which is a technology that allows network devices to receive power and data over the same Ethernet cable. PoE eliminates the need for separate power adapters or outlets for devices such as IP phones, cameras, or APs. PoE requires two types of devices: PSE (Power Sourcing Equipment) and PD (Powered Device). A PSE is a device that provides power to the Ethernet cable, such as a switch, injector, or splitter. A PD is a device that receives power from the Ethernet cable, such as an IP phone, camera, or AP.  When implementing PoE, a switch plays the role of a PSE 9 10 .  References:   CWNA-109 Study Guide , Chapter 7: Power over Ethernet (PoE), page 293;  CWNA-109 Study Guide , Chapter 7: Power over Ethernet (PoE), page 287.

When performing a post-deployment validation survey for voice over Wi-Fi (VoWiFi), an action that must be performed is  Application analysis with an active phone call on a VoWiFi handset . Application analysis is a method of testing the performance of a specific application over the WLAN by measuring parameters such as throughput, latency, jitter, packet loss, MOS score, and R-value. Application analysis with an active phone call on a VoWiFi handset can help to evaluate the quality of service (QoS) and user experience of VoWiFi calls over the WLAN. It can also help to identify any issues or bottlenecks that may affect VoWiFi calls such as interference, roaming delays, or insufficient coverage.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 549; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 519.

What prevents each station from using all the airtime when other client stations are actively communicating in the same BSS is  CSMA/CA . CSMA/CA stands for Carrier Sense Multiple Access with Collision Avoidance and is a media access control method used by WLAN devices to share the wireless medium. CSMA/CA works by having each station sense the medium before transmitting a frame. If the medium is busy (i.e., another station is transmitting), the station defers its transmission until the medium is idle. If the medium is idle, the station waits for a random backoff period before transmitting. This way, CSMA/CA reduces the chances of collisions and ensures fair access to the medium for all stations. CSMA/CA also uses positive acknowledgements to confirm successful transmissions and retransmissions to recover from errors. CSMA/CD, DOS prevention, and OFDMA are not used by WLAN devices in a BSS.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 108; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 98.

OFDM is a modulation method that divides the channel bandwidth into multiple subcarriers, each carrying a single data symbol. This allows for higher data rates and more robust transmissions in multipath environments. OFDM was first introduced in the 802.11a standard, which operates in the 5 GHz band and supports data rates up to 54 Mbps. Later, the 802.11g standard adopted OFDM for the 2.4 GHz band, and the 802.11n and 802.11ac standards enhanced OFDM with features such as MIMO (Multiple Input Multiple Output), channel bonding, and higher-order modulation schemes to achieve data rates up to 600 Mbps and 6.9 Gbps, respectively. These standards are collectively known as the ERP (Extended Rate PHY), HT (High Throughput), and VHT (Very High Throughput) PHYs .  References:  [CWNA-109 Study Guide], Chapter 4: Radio Frequency Signal and Antenna Concepts, page 163; [CWNA-109 Study Guide] , Chapter 4: Radio Frequency Signal and Antenna Concepts, page 157.

The short guard interval is an optional feature of 802.11n and 802.11ac that reduces the time between OFDM symbols from 800 ns to 400 ns. This can increase the data rate by about 11%, but also requires more precise timing and synchronization between the transmitter and the receiver. The short guard interval is only used when both the AP and the client support it and agree to use it .  References:  [CWNA-109 Study Guide], Chapter 4: Radio Frequency Signal and Antenna Concepts, page 163; [CWNA-109 Study Guide] , Chapter 4: Radio Frequency Signal and Antenna Concepts, page 157.

The FCS (Frame Check Sequence) is appended to the end of each 802.11 data frame after the payload. The FCS is a 4-byte field that contains a CRC-32 (Cyclic Redundancy Check) value that is calculated based on the contents of the MAC header and the payload of the frame. The FCS is used by the receiver to verify the integrity of the frame and to detect any errors or corruption that may have occurred during transmission. If the FCS does not match with the expected value, the frame is discarded by the receiver.  References:  , Chapter 4, page 139; , Section 4.2

The solution that you recommend is an  Overlay WLAN monitoring solution . An Overlay WLAN monitoring solution is a system that uses dedicated sensors or probes to monitor the WLAN performance over time. The sensors are deployed throughout the WLAN coverage area and collect data on various metrics such as signal strength, noise level, channel utilization, interference, throughput, latency, packet loss, and QoS. The sensors send the data to a centralized server or appliance that analyzes the data and provides a single pane of glass for administration and monitoring of the solution. An Overlay WLAN monitoring solution can help to detect and troubleshoot WLAN issues, optimize WLAN performance, and generate reports and alerts.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 538; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 508.

An IEEE 802.11 amendment is a proposed change or addition to the existing 802.11 standard, which defines the specifications and protocols for wireless LANs. An amendment goes through several stages of development, such as draft, sponsor ballot, and final approval, before it is ratified by the IEEE Standards Association and becomes part of the standard. Until then, it has no official impact on the standard, although some vendors may release products based on draft amendments to gain a competitive edge or to influence the final outcome of the amendment .  References:  [CWNA-109 Study Guide], Chapter 1: Overview of Wireless Standards, Organizations, and Fundamentals, page 25; [CWNA-109 Study Guide] , Chapter 1: Overview of Wireless Standards, Organizations, and Fundamentals, page 23; [IEEE website], IEEE-SA Standards Development Process.

VHT stands for Very High Throughput, which is a physical layer (PHY) specification that supports the 5 GHz frequency band and supports 80 MHz channels. VHT is used by the IEEE 802.11ac standard, which is also known as Wi-Fi 5. VHT allows for higher data rates and more spatial streams than the previous HT (High Throughput) PHY, which is used by the IEEE 802.11n standard, also known as Wi-Fi 4.  HT supports the 2.4 GHz and 5 GHz bands, but only supports up to 40 MHz channels 1 2

The other options are not correct because:

ERP (option C) stands for Extended Rate PHY, which is a physical layer specification that supports the 2.4 GHz frequency band and supports up to 20 MHz channels. ERP is used by the IEEE 802.11g standard, which is also known as Wi-Fi 3.  ERP allows for higher data rates than the previous DSSS (Direct Sequence Spread Spectrum) PHY, which is used by the IEEE 802.11b standard, also known as Wi-Fi 2 3 4

OFDM (option D) stands for Orthogonal Frequency Division Multiplexing, which is a modulation technique that divides a signal into multiple subcarriers that are spaced orthogonally to each other. OFDM is not a physical layer specification, but a common feature of many PHY specifications, including ERP, HT, and VHT.  OFDM allows for higher spectral efficiency and robustness against multipath interference than the previous CCK (Complementary Code Keying) modulation technique used by DSSS 3 4

WLAN bridges must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally. A WLAN bridge is a device that connects two or more networks using the 802.11 protocol. A WLAN bridge must have a clear and strong signal between the two endpoints to ensure reliable and fast data transmission. The signal-to-noise ratio (SNR) is a measure of the quality of the signal, which depends on the distance, interference, obstacles, and antenna gain between the transceivers. A higher SNR means a better signal quality and a higher data rate. A lower SNR means a worse signal quality and a lower data rate.  Therefore, a WLAN bridge must use a channel with acceptable SNR at both transceivers to maintain the desired data rate bi-directionally 1 .

A 5 GHz channel should be used for this AP because channels 1 and 6 are 2.4 GHz channels and they have no impact on the decision. The 5 GHz frequency band offers more non-overlapping channels than the 2.4 GHz frequency band, which reduces interference and improves performance. The 5 GHz frequency band also supports higher data rates and wider channel bandwidths than the 2.4 GHz frequency band, which increases capacity and throughput. The 5 GHz frequency band also has less interference from other devices and sources than the 2.4 GHz frequency band, which enhances reliability and quality of service. Therefore, it is recommended to use the 5 GHz frequency band for WLANs whenever possible. Channels 1 and 6 are two of the three non-overlapping channels in the 2.4 GHz frequency band (the other one is channel 11). They are used by a neighbor network in this scenario, but they do not affect the channel selection for this AP because they operate in a different frequency band than the 5 GHz frequency band. Channel 6 is not always best to use; it depends on the interference and congestion level in the environment. Channel 1 is not best to use because it has a lower frequency than channel 6; frequency does not determine channel quality or performance. Channel 11 is not best to use because it is also a 2.4 GHz channel and it may interfere with channels 1 and 6.  References:  CWNA-109 Study Guide, Chapter 4: Antenna Systems and Radio Frequency (RF) Components, page 113

The client STA can use  Beacon frames transmitted by the AP  to verify that an AP supports the same data rates that it supports. Beacon frames are management frames that are periodically broadcasted by the APs to announce their presence, capabilities, and parameters. One of the information elements contained in the Beacon frames is the Supported Rates or Extended Supported Rates, which lists the data rates that the AP can use for communication. The client STA can compare its own data rates with those advertised by the AP to determine if they are compatible. Data frames, authentication frames, and probe request frames do not contain information about data rates.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 133; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 123.

To calculate the EIRP at the antenna element, we need to add the transmitter output power, subtract the cable loss, and add the antenna gain. All these val ues need to be converted to dBm first, if they are not already given in that unit. In this case, we have:

Transmitter output power = 50 mW = 10 log (50) dBm = 16.99 dBm Cable loss = 3 dB Antenna gain = 9 dBi

EIRP = Transmitter output power - Cable loss + Antenna gain EIRP = 16.99 - 3 + 9 EIRP = 22.99 dBm

Rounding up to the nearest integer, we get  23 dBm  as the EIRP at the antenna element 1 2 .  References:   CWNA-109 Study Guide , Chapter 2: Radio Frequency Fundamentals, page 92;  CWNA-109 Study Guide , Chapter 2: Radio Frequency Fundamentals, page 88.

 iPerf is an open source tool that is designed to perform a throughput test on the WLAN. iPerf is a cross-platform command-line tool that can measure the bandwidth and quality of network links by generating TCP or UDP traffic between two endpoints. iPerf can run as either a server or a client mode, depending on whether it receives or sends traffic. iPerf can also report various metrics of network performance, such as throughput, jitter, packet loss, delay, and TCP window size. To perform a throughput test on the WLAN using iPerf, one device needs to run iPerf in server mode and another device needs to run iPerf in client mode. The devices need to be connected to the same WLAN network and have their IP addresses configured properly. The device running iPerf in client mode needs to specify the IP address of the device running iPerf in server mode as well as other parameters such as protocol, port number, duration, interval, bandwidth limit, packet size, etc. The device running iPerf in server mode will listen for incoming connections from the client device and send back acknowledgments or responses depending on the protocol used. The device running iPerf in client mode will send traffic to the server device according to the specified parameters and measure the network performance. The device running iPerf in client mode will display the results of the throughput test at the end of the test or at regular intervals during the test.  The results can show the average, minimum, maximum, and instantaneous throughput of the network link, as well as other metrics such as jitter, packet loss, delay, and TCP window size.  References:   1 , Chapter 7, page 287;  2 , Section 4.3

A possible cause of a sudden change in performance for the laptop computers is that  a new tenant in the building has set their AP to the same RF channel that your customer is using . This can create co-channel interference (CCI), which is a situation where two or more APs or devices use the same or overlapping channels in the same area. CCI can degrade the performance of WLANs by increasing contention, collisions, retransmissions, and latency. CCI can also reduce the effective range and throughput of WLANs by lowering the signal-to-noise ratio (SNR). To avoid or mitigate CCI, it is recommended to use non-overlapping channels, adjust transmit power levels, or implement channel management techniques such as dynamic frequency selection (DFS) or load balancing. The sky condition, antenna position, or Bluetooth headset are not likely to cause a sudden change in performance for the laptop computers.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 81; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 71.

What is always required to establish a high quality 2.4 GHz RF link at a distance of 3 miles (5 kilometers) is  a Fresnel Zone that is at least 60% clear of obstructions . The Fresnel Zone is an elliptical-shaped area around the line-of-sight path between two antennas that reflects and refracts the RF waves. The Fresnel Zone radius depends on the frequency of the RF signal and the distance between the antennas. For optimal performance, the Fresnel Zone should be at least 60% clear of any obstructions that may cause interference, attenuation, or multipath fading. The minimum output power level, antenna gain, and antenna type may vary depending on the environmental conditions and regulatory constraints, but they are not always required for a high quality RF link.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 75; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 65.

The fact that is true regarding controllers and APs in a Split MAC architecture is that  an IP tunnel is established between the AP and controller for AP management and control functions . A Split MAC architecture is a WLAN architecture where some of the MAC layer functions are performed by the APs (such as encryption, decryption, and frame acknowledgement) and some are performed by the controllers (such as authentication, association, roaming, and QoS). To communicate with each other, the APs and controllers establish an IP tunnel that carries the management and control frames between them. The IP tunnel can use protocols such as Lightweight Access Point Protocol (LWAPP) or Control And Provisioning of Wireless Access Points (CAPWAP).  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 372; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 362.

The likely cause of the problem is that  the external hard drive is USB 3.0 and is causing a significant increase in the noise floor when in use . USB 3.0 devices are known to generate radio frequency interference (RFI) in the 2.4 GHz band due to their high data transfer rates and harmonics. This RFI can increase the noise floor and degrade the signal-to-noise ratio (SNR) of WLAN devices operating in the same band. This can result in lower data rates, reduced throughput, increased retransmissions, and poor performance. The problem may not occur outside of business hours or on the user’s home network because of different usage patterns or environmental factors.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 527; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 497.

 The cipher suite specified by the 802.11-2016 standard and is not deprecated is  Counter Mode with CBC-MAC Protocol (CCMP) . CCMP is an encryption protocol that uses  Advanced Encryption Standard (AES)  as the underlying cipher and provides  confidentiality, integrity, and origin authentication  for wireless data. CCMP is the mandatory encryption protocol for  WPA2  and  WPA3 .  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 295; [IEEE Standard for Information technology–Telecommunications and information exchange between systems Local and metropolitan area networks–Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications] , page 1560.

The channel that can be used for VHT transmissions according to the 802.11 specification is  channel 144 . VHT stands for Very High Throughput and is the PHY layer specification for 802.11ac devices. VHT transmissions can use channel bandwidths of 20 MHz, 40 MHz, 80 MHz, or 160 MHz in the 5 GHz band. Channel 144 is one of the channels in the 5 GHz band that can support VHT transmissions with any of these bandwidths. Channel 6, channel 1, and channel 11 are channels in the 2.4 GHz band that cannot support VHT transmissions, as they are only compatible with legacy (802.11b/g/n), HT (802.11n), or ERP (802.11g) transmissions with up to 20 MHz bandwidth.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 214; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 204.

Based on the information given, what can be determined as certainly true about this AP is that  it has 4 radio chains . A radio chain is a hardware component that consists of an antenna, a radio frequency (RF) amplifier, and a transceiver. The number of radio chains indicates how many spatial streams an AP can transmit or receive simultaneously using Multiple Input Multiple Output (MIMO) technology. The notation x:y:z in an AP specification denotes the number of radio chains (x), the number of spatial streams (y), and the number of spatial streams per band (z). Therefore, a tri-band, 4x4:4, Wi-Fi 6, 802.11ax AP has four radio chains in each of its three bands (2.4 GHz, low 5 GHz, and high 5 GHz). It also supports four spatial streams in total and four spatial streams per band. It cannot be determined as certainly true that it supports four channels in each band, UL-MU-MIMO, or uses a modified OpenWRT firmware based on the information given.  References:  [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 223; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109] , page 213.

Patch and panel antennas are directional antenna types that are commonly used by indoor Wi-Fi devices in a MIMO multiple spatial stream implementation. These antennas have a flat rectangular shape and can be mounted on walls or ceilings to provide coverage in a specific direction. They have a moderate gain and a relatively wide beamwidth, making them suitable for multipath environments where signals can reflect off different surfaces and create multiple spatial streams.  Patch and panel antennas can also support polarization diversity, which means they can transmit and receive both horizontally and vertically polarized waves, increasing the MIMO performance.  References:   1 , Chapter 2, page 72;  2 , Section 2.4

In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical step is:

Station-to-Station Traffic Blocking : Also known as client isolation, this feature prevents direct communication between devices connected to the Wi-Fi network. By enabling this on the access points, Lynne can significantly decrease the likelihood of active attacks like man-in-the-middle (MITM) attacks, where an attacker intercepts and possibly alters the communication between two parties.

The other options, while beneficial for network security, might not be as straightforward or practical for Lynne ' s situation:

Network Access Control (NAC) requires a more complex infrastructure and management, which might not be ideal for a small hotel setup.

Implementing an SSL VPN adds an extra layer of security but might complicate the login process for users, potentially affecting the user experience.

Requiring EAP-FAST authentication provides secure authentication but may not be feasible for transient customers who expect quick and easy network access.

Therefore, enabling station-to-station traffic blocking is a practical and efficient measure that Lynne can implement to enhance customer security on the Wi-Fi network.

The statement that in modern networks, both centralized and distributed data forwarding work well for most standard office deployments is true about WLAN performance. Data forwarding refers to how wireless frames are transmitted from wireless clients to wired networks or vice versa through wireless access points (APs). Centralized data forwarding means that all wireless frames are sent to a central controller or gateway before being forwarded to their destinations. Distributed data forwarding means that wireless frames are forwarded directly by the APs to their destinations without going through a central controller or gateway. Both methods have their advantages and disadvantages, depending on the network size, topology, traffic pattern, security, and management requirements. However, in modern networks, both methods can achieve high performance and scalability for most standard office deployments, as they can leverage advanced features such as fast roaming, load balancing, quality of service, and encryption. The other statements about WLAN performance are false. In most WLANs, special skill or tuning is required to get peak performance, such as selecting the appropriate channel, power, data rate, and antenna settings. WLANs perform worse as more wireless clients connect with each AP, as they cause more contention and interference on the wireless medium.  To get the best performance out of an AP, you should not disable data rates of 72 Mbps and lower, as they are needed for backward compatibility and range extension.  References:  CWNA-109 Study Guide, Chapter 9: Wireless LAN Architecture, page 281 1

The guard interval is a short period of time inserted between the symbols of an OFDM signal to prevent inter-symbol interference and improve the robustness of the transmission 1 . The guard interval can have different values depending on the 802.11 standard and the configuration of the device.  For example, 802.11n supports two guard intervals: 800 ns (normal) and 400 ns (short) 2 .  802.11ac supports the same guard intervals as 802.11n, plus an optional 200 ns guard interval for 80 MHz and 160 MHz channels 3 .  802.11ax supports three guard intervals: 800 ns, 1600 ns, and 3200 ns 4 .

The guard interval affects the data rate because it determines the duration of each symbol. A shorter guard interval means more symbols can be transmitted in a given time, resulting in a higher data rate. However, a shorter guard interval also means less protection against inter-symbol interference, which may degrade the signal quality and increase the error rate. Therefore, there is a trade-off between data rate and reliability when choosing the guard interval.

The MCS tables for HT and VHT PHY devices show the data rates for different combinations of modulation, coding, channel width, spatial streams, and guard intervals.  For example, for a VHT device using MCS 9 with QAM-256 modulation, 5/6 coding rate, 80 MHz channel width, and one spatial stream, the data rate is 433.3 Mbps with a normal guard interval (800 ns) and 486.7 Mbps with a short guard interval (400 ns) 2 . Therefore, the guard interval impacts the data rate according to the MCS tables.

The two IEEE amendments that should be supported to provide the management frame protection and fast secure roaming security features are 802.11r and 802.11w 1 2 .

802.11r (Fast BSS Transition) : This amendment to the IEEE 802.11 standard permits continuous connectivity aboard wireless devices in motion, with fast and secure client transitions from one Basic Service Set to another 1 .

802.11w (Management Frame Protection) : This amendment increases the security of its management frames 2 .