CWAP-405 Dumps To Pass CWNP Exam in 24 Hours - PDFDumps
Buy Latest CWAP-405 Exam Q&A PDF - One Year Free Update
NEW QUESTION # 54
You are using a laptop-based protocol analyzer to scan all channels and determine the basic configuration of the WLAN Basic Service Set in your facility. You are scanning all channels. All configured with default settings.
What can you change to cause the scan to run faster while still APs are capturing beacon frames on all the channels?
- A. Configure the scan time for channels to <100 ms
- B. Configure the RBW to more than 120 kHz
- C. Configure the fragmentation threshold to 1500 bytes
- D. Configure the scan time for channels to 300-500 ms
Answer: B
NEW QUESTION # 55
While troubleshooting DHCP issues, you perform a protocol capture in order to determine if the DNCP pool is depleted. The capture does not show DHCPnak messages.
Where else could you look to determine if the pool is depleted?
- A. DHCP server logs
- B. Switch logs
- C. Spectrum analyzer
- D. AP logs
Answer: A
Explanation:
A very common problem for WLANs is DHCP pool depletion. This occurs because many wireless clients come-and-go from the network quickly. If a client connects for only two or three minutes and the lease duration is set to multiple days (3-8 days is not uncommon), the IP address will be lost for that entire time. To resolve such issues, create more pools and reduce the lease duration to hours instead of days. Look for DHCP negative acknowledgement or server log errors to determine if the IP pool is depleted.
NEW QUESTION # 56
Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software. When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?
- A. Authentication
- B. Reassociation
- C. 4-Way Handshake
- D. Probe Response
Answer: C
Explanation:
The 4-way handshake is the process that establishes the pairwise transient key (PTK) between the client and the AP in WPA2-PSK. The PTK is derived from the PSK, the SSID, and some random numbers exchanged in the handshake frames. The PTK is used to encrypt and decrypt the data frames between the client and the AP. Therefore, in order to decrypt WPA2-PSK data packets, a protocol analyzer needs to capture the 4-way handshake frames and have the PSK and SSID configured in the analyzer software12 References:
* CWAP-405Study Guide, Chapter 3: 802.11 MAC Layer Frame Formats and Technologies, page 87
* CWAP-405Objectives, Section 3.5: Analyze security exchanges
NEW QUESTION # 57
You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames): 1) 802.11 Probe Request and 802.11 Probe Response 2) 802.11 Auth and another 802.11 Auth 2) 802.11 Assoc Req and 802.11 Assoc Rsp 4) EAPOL-Start 5) EAP Request and EAP Response 6) EAP Request and EAP Response 7) EAP Request and EAP Response 8) EAP Request and EAP Response 9) EAP Request and EAP Response 10) EAP Success 19) EAPOL-Key (4 frames in a row) What are you seeing in the capture file?
- A. WPA2-Personal authentication
- B. Wi-Fi Protected Setup with PIN
- C. WPA2-Enterprise authentication
- D. 802.1X with Dynamic WEP
Answer: C
NEW QUESTION # 58
You have been recently hired as the wireless network administrator for an organization spread across seven locations. They have deployed more than 100 APs, but they have not been managed in either an automated or manual process for more than 18 months.
Given this length of time, what is one of the first things you should evaluate from a support perspective?
- A. The VLANs in use
- B. The data rates allowed
- C. The channels in use
- D. The firmware revision
Answer: D
NEW QUESTION # 59
ABC Company requires the ability to identify and quickly locate rogue devices. ABC has chosen an overlay WIPS solution with Wi-Fi sensors that use dipole antennas to perform this task. No other sensors are included. Use your knowledge of location tracking techniques to answer the question.
Which one of the following location methods is not available in the described system?
- A. RF Fingerprinting
- B. GPS Positioning
- C. Trilateration of RSSI measurements
- D. Time Difference of Arrival (TDoA)
Answer: A
NEW QUESTION # 60
What is the function of 802.11 Management frames?
- A. Prioritize network administration traffic
- B. Manage the BSS
- C. Manage the flow of data
- D. Communicate configuration changes between WLAN controller and APs
Answer: B
Explanation:
The function of 802.11 management frames is to manage the BSS. A BSS (Basic Service Set) is a group of STAs (stations) that share a common SSID (Service Set Identifier) and communicate with each other through an AP (access point) or directly in an ad hoc mode. Management frames are one of the three types of 802.11 frames, along with control and data frames. Management frames are used to establish, maintain, and terminate associations between STAs and APs, as well as to advertise and discover BSSs, exchange security information, report errors, and perform other management functions. The other options are not correct, as they are not functions of 802.11 management frames. Prioritizing network administration traffic, communicating configuration changes between WLAN controller and APs, and managing the flow of data are functions of other types of frames or protocols. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 120-121
NEW QUESTION # 61
You are troubleshooting problems with DHCP in relation to lightweight APs. They vendor class identifier (VCI) is not specified in the DHCP server. When you contact vendor support, they inform you that it is not necessary.
When is this information true?
- A. When only one client option 60 value is required
- B. When only one client option 43 value is required
- C. When the DHCP server is directly connected to the subnet
- D. When only one AP exists on the subnet
Answer: B
Explanation:
The DHCP server should be configured to provide the IP address information to the APs, but it may also be required to pass information for option 43. Option 43 is a vendor information option and can be used for any vendor purpose. The vendor class identifier (VCI) (for example, "Cisco AP c3600") is used with option 60 to determine the appropriate information to return with option 43.
NEW QUESTION # 62
What should the To DS and From DS flags be to set to in an Association Response frame?
- A. To DS - 0, From DS = 0
- B. To DS = 1, From DS = 1
- C. To DS = 0, From DS = 1
- D. To DS - 1, From DS = 0
Answer: C
Explanation:
The To DS and From DS flags should be set to 0 in an Association Response frame. An Association Response frame is a type of management frame that is transmitted by an AP to accept or reject an association request from a STA. The To DS (To Distribution System) and From DS (From Distribution System) flags are two bits in the Frame Control field of the MAC header that indicate whether a frame is destined for or originated from the DS (Distribution System), which is a system that connects multiple BSSs together. The To DS and From DS flags can have four possible combinations: 00, 01, 10, or 11. For an Association Response frame, which is sent from an AP to a STA within a BSS, both flags should be set to 0. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 121-122
NEW QUESTION # 63
A new firmware has been released for the AP model you use in your WLAN. You have more than 120 of these APs installed.
What is a good reason for applying a firmware update on an enterprise AP?
- A. Disable lower data rates
- B. Enable the short guard interval
- C. Enable 4x4:4 spatial streams on a 3x3:3 AP
- D. Enable new security features and patch vulnerabilities
Answer: D
NEW QUESTION # 64
A manufacturing facility has installed a new automation system which incorporates an 802.11 wireless network. The automation system is controlled from tablet computers connected via the WLAN. However, the automation system has not gone live due to problem with the tablets connecting to the WLAN. The WLAN vendor has been onsite to perform a survey and confirmed good primary and secondary coverage across the facility. As a CWAP you are called in to perform Spectrum Analysis to identify any interference sources.
From the spectrum analysis, you did not identify any interference sources but were able to correctly identify the issue. Which of the following issues did you identify from the spectrum analysis?
- A. The tablets are connecting to the wrong SSID
- B. The tablets are entering power save mode and failing to wake up to receive the access points transmissions
- C. There is a power mismatch between the APs and the clients
- D. A high noise floor has resulted in a SNR of less than 20dB
Answer: C
Explanation:
The most likely issue that can be identified from the spectrum analysis is a power mismatch between the APs and the clients. A power mismatch occurs when the APs transmit at a higher power level than the clients, or vice versa. This can cause asymmetric communication, where one side can hear the other, but not vice versa.
This can result in poor performance, disconnections, or packet loss. A spectrum analysis can reveal a power mismatch by showing different signal amplitudes or RSSI values for the APs and the clients on the same channel or frequency. The other options are not correct, as they cannot be identified from the spectrum analysis alone. The tablets' SSID, power save mode, and noise floor can be determined by using other tools or methods, such as protocol analysis, site survey, or device configuration. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 3: Spectrum Analysis, page 79-80
NEW QUESTION # 65
How does a VoIP Phone, using WMM Power Save, request data frames buffered at the AP?
- A. The VoIP phone transmits a trigger frame, which is a QoS Null frame or a QoS Data frame
- B. The VoIP phone transmits a PS-Poll frame
- C. The VoIP phone sets the More Data bit in the MAC Header to 1
- D. The VoIP phone transmits a WMM Action frame
Answer: A
Explanation:
A VoIP phone, using WMM Power Save, requests data frames buffered at the AP by transmitting a trigger frame, which is a QoS Null frame or a QoS Data frame. WMM Power Save is a power saving mode that allows a STA (station) to conserve battery power by periodically sleeping and waking up. WMM Power Save is based on WMM (Wi-Fi Multimedia), which is a QoS (Quality of Service) enhancement that provides prioritized and differentiated access to the medium for different types of traffic. When a STA sleeps, it cannot receive any data frames from the AP, so it informs the AP of its power save status by setting a bit in its MAC header. The AP then buffers any data frames destined for the sleeping STA until it wakes up. When a STA wakes up, it sends a trigger frame to the AP, indicating its AC (Access Category), which is a logical queue that corresponds to its QoS level. A trigger frame can be either a QoS Null frame or a QoS Data frame, depending on whether it has any payload or not. The AP then responds with one or more data frames from the same AC as the trigger frame, followed by an ACK or BA (Block Acknowledgement) frame from the STA.
The other options are not correct, as they are not used by a VoIP phone using WMM Power Save to request data frames buffered at the AP. A PS-Poll (Power Save Poll) frame is used by a STA using legacy power save mode, not WMM Power Save mode, to request data frames buffered at the AP. A PS-Poll frame does not indicate any AC or QoS information. Setting the More Data bit in the MAC header to 1 does not request any data frames from the AP, but indicates that there are more data frames to be sent by the STA or received by the STA. Transmitting a WMM Action frame does not request any data frames from the AP, but performs various management actions related to WMM features, such as admission control, parameter update, etc. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 7: QoS Analysis, page
198-199
NEW QUESTION # 66
What is encrypted within the third message of the 4-Way Handshake?
- A. GMK
- B. PMK
- C. GTK
- D. PTK
Answer: C
Explanation:
The GTK (Group Temporal Key) is encrypted within the third message of the 4-Way Handshake. The 4-Way Handshake is a process that establishes a secure connection between a STA (station) and an AP (access point) using WPA2 (Wi-Fi Protected Access 2), which is a security protocol that uses AES-CCMP (Advanced Encryption Standard-Counter Mode CBC-MAC Protocol) as its encryption algorithm. The 4-Way Handshake consists of four messages that are exchanged between the STA and the AP. The first message is sent by the AP to the STA, containing the ANonce (Authenticator Nonce), which is a random number generated by the AP. The second message is sent by the STA to the AP, containing the SNonce (Supplicant Nonce), which is a random number generated by the STA, and the MIC (Message Integrity Code), which is a value that verifies the integrity of the message. The third message is sent by the AP to the STA, containing the GTK, which is a key that is used to encrypt and decrypt multicast and broadcast data frames, and the MIC. The GTK is encrypted with the KEK (Key Encryption Key), which is derived from the PTK (Pairwise Temporal Key).
The PTK is a key that is used to encrypt and decrypt unicast data frames, and it is derived from the PMK (Pairwise Master Key), the ANonce, and the SNonce. The fourth message is sent by the STA to the AP, containing only the MIC, to confirm the completion of the 4-Way Handshake. The other options are not correct, as they are not encrypted within the third message of the 4-Way Handshake. The PMK is a key that is derived from a passphrase or obtained from an authentication server, and it is not transmitted in any message of the 4-Way Handshake. The PTK is a key that is derived from the PMK, the ANonce, and the SNonce, and it is not transmitted in any message of the 4-Way Handshake. The GMK (Group Master Key) is a key that is generated by the AP and used to derive the GTK, and it is not transmitted in any message of the 4-Way Handshake. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 8: Security Analysis, page 211-213
NEW QUESTION # 67
During an initial install of a controller-based WLAN, the APs are not locating the WLAN controller. The controller is two router hops away from the nearest AP. DHCP is not used. When performing a packet trace, you see a DNS response code of 3 targeted at one of the APs.
What is the problem?
- A. The controller host record has not been created in the DNS server
- B. The authentication to the DNS server failed
- C. The router is not forwarding packets to the DNS server
- D. The DNS server is not authoritative for the domain
Answer: A
NEW QUESTION # 68
You are attempting to work through a user complaint with the CWNP-recommended troubleshooting methodology.
What must be clearly identified in order to reduce the number of possible causes at step three?
- A. The problem
- B. The user name
- C. The user's IP configuration
- D. The device type
Answer: A
NEW QUESTION # 69
What is the difference between a Data frame and a QoS-Data frame?
- A. QoS Data frames include a QoS information element
- B. QoS Data frames include a QoS control field
- C. QoS Data frames include a DSCP control field
- D. QoS Data frames include an 802.1Q VLAN tag
Answer: B
Explanation:
The difference between a Data frame and a QoS-Data frame is that QoS Data frames include a QoS control field. A Data frame is a type of data frame that is used to carry user data or upper layer protocol data between STAs and APs. A QoS Data frame is a type of data frame that is used to carry user data or upper layer protocol data between STAs and APs that support QoS (Quality of Service) features. QoS features allow different types of traffic to be prioritized and handled differently according to their QoS requirements, such as delay, jitter, throughput, etc. QoS Data frames include a QoS control field in their MAC header, which contains information such as traffic identifier (TID), queue size (TXOP), acknowledgment policy (ACK), etc., that are used for QoS purposes. The other options are not correct, as they do not describe the difference between Data and QoS Data frames. QoS Data frames do not include a DSCP (Differentiated Services Code Point) control field, which is part of the IP header in the network layer, not the MAC header in the data link layer. QoS Data frames do not include a QoS information element (IE), which is part of some management frames that indicate QoS capabilities or parameters, not data frames. QoS Data frames do not include an 802.1 Q VLAN tag, which is part of some Ethernet frames that indicate VLAN membership or priority, not wireless frames. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 118-119
NEW QUESTION # 70
You are tasked with describing the various frames used in 802.11 communications.
What frame is used for spectrum management, fast BSS transition and some other actions taken within a BSA?
- A. PS Poll
- B. BlockAck
- C. Action
- D. CTS
Answer: C
NEW QUESTION # 71
......
Download the Latest CWAP-405 Dump - 2026 CWAP-405 Exam Question Bank: https://torrentvce.pdfdumps.com/CWAP-405-valid-exam.html