[2026] Valid CWNA-109 test answers & CWNP CWNA-109 exam pdf
Verified CWNA-109 dumps Q&As - Pass Guarantee or Full Refund
NEW QUESTION # 68
What statement about 802.3, Clause 33 Power over Ethernet is true?
- A. When using CAT5 cabling, you increase the maximum draw available to the PD over that available with CAT6.
- B. Only midspan PSEs are supported.
- C. Only endpoint PSEs are supported.
- D. The lowest voltage drop is achieved when using CAT6 cable instead of Cat5 or CAT5e.
Answer: D
Explanation:
https://www.cablinginstall.com/articles/2012/08/cat-6a-vs-cat-5e-poe.html The statement that the lowest voltage drop is achieved when using CAT6 cable instead of Cat5 or CAT5e is true about 802.3, Clause 33 Power over Ethernet. Power over Ethernet (PoE) is a technology that allows electrical power to be delivered over Ethernet cables along with data signals. PoE is defined by IEEE 802.3, Clause 33 and has several variants, such as PoE (802.3af), PoE+ (802.3at), and PoE++ (802.3bt). PoE works by using a device called PSE (Power Sourcing Equipment) that injects power into the Ethernet cable and a device called PD (Powered Device) that receives power from the Ethernet cable. The PSE can be either an endpoint device, such as a switch or a router, or a midspan device, such as an injector or a splitter, that is inserted between two Ethernet devices. The PD can be any device that requires power, such as an access point, a camera, or a phone.
One of the factors that affects PoE performance is voltage drop, which is the reduction of voltage that occurs as current flows through a cable due to its resistance. Voltage drop can cause power loss and inefficiency in PoE systems, as well as damage to PDs if the voltage falls below their minimum requirement. To minimize voltage drop, it is recommended to use high-quality cables with low resistance and short length. Among the common types of Ethernet cables, CAT6 has the lowest resistance and therefore the lowest voltage drop compared to Cat5 or CAT5e. CAT6 also has higher bandwidth and data rate than Cat5 or CAT5e, making it more suitable for PoE applications. References: 1, Chapter 7, page 263; 2, Section 4.4
NEW QUESTION # 69
You are attempting to explain RF shadow and how it can cause lack of coverage. What common building item frequently causes RF shadow and must be accounted for in coverage plans?
- A. Carpeted floors
- B. Cubicle partitions
- C. Wooden doors
- D. Elevators
Answer: D
Explanation:
Elevators are a common building item that frequently causes RF shadow and must be accounted for in coverage plans. RF shadow is a term that describes an area where wireless signals are blocked or significantly weakened by an obstacle or an object that absorbs or reflects RF energy. RF shadow can cause lack of coverage or poor performance in a WLAN because wireless devices in those areas may not be able to communicate with access points or other devices. RF shadow can be mitigated by adjusting access point placement, antenna orientation, transmit power level, or channel selection to avoid or overcome the obstacle or object that causes it. Elevators are a common building item that frequently causes RF shadow because they are made of metal and they move up and down within a shaft. Metal is a material that has high attenuation and reflection values, which means it can block or bounce off wireless signals very effectively. A moving elevator can create dynamic RF shadow that changes depending on its position and direction. Therefore, elevators must be accounted for in coverage plans to ensure adequate WLAN coverage and performance throughout the facility. The other options are not common building items that frequently cause RF shadow or must be accounted for in coverage plans. Wooden doors are not likely to cause RF shadow because they are made of wood, which is a material that has low attenuation and reflection values, which means it can pass through or slightly weaken wireless signals. Carpeted floors are not likely to cause RF shadow because they are made of fabric, which is a material that has low attenuation and reflection values, which means it can pass through or slightly weaken wireless signals. Cubicle partitions are not likely to cause RF shadow because they are made of thin plastic or cardboard, which are materials that have low attenuation and reflection values, which means they can pass through or slightly weaken wireless signals. References: CWNA-109 Study Guide, Chapter 13:
Wireless LAN Site Surveys - Types & Processes , page 433
NEW QUESTION # 70
To ease user complexity, your company has implemented a single SSID for all employees. However, the network administrator needs a way to control the network resources that can be accessed by each employee based in their department.
What WLAN feature would allow the network administrator to accomplish this task?
- A. SNMP
- B. RBAC
- C. WIPS
- D. WPA2
Answer: B
Explanation:
The WLAN feature that would allow the network administrator to control the network resources that can be accessed by each employee based on their department is Role-Based Access Control (RBAC). RBAC is a method of assigning different permissions and policies to users or groups based on their roles in the organization. RBAC can be implemented by using VLANs, ACLs, or firewalls to restrict access to certain network segments or resources. RBAC can also be integrated with 802.1X/EAP authentication to dynamically assign roles and VLANs to users based on their credentials. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 403; [Role-Based Access Control (RBAC) in Wireless Networks], page 1.
NEW QUESTION # 71
802. 11ax (HE) introduces Resource Units that can be used to allow communications with multiple devices at the same time, on the same channel, in the same BSS. What feature of 802.1 lax provides this functionality?
- A. 6 GHz support
- B. OFDMA
- C. TWT
- D. Wi-Fi-LTE
Answer: B
Explanation:
The feature of 802.11ax (HE) that provides this functionality is OFDMA. OFDMA stands for Orthogonal Frequency Division Multiple Access and is a technology that allows multiple devices to communicate simultaneously on the same channel in the same BSS. OFDMA works by dividing a channel into smaller subchannels called Resource Units (RUs), which are composed of groups of subcarriers or tones. Each RU can be assigned to a different device based on its bandwidth requirement and signal quality. This way, OFDMA can increase the efficiency and capacity of the channel by reducing overhead, contention, and latency. OFDMA can also support both uplink and downlink multi-user transmissions using trigger frames and buffer status reports. 6 GHz support, TWT, and Wi-Fi-LTE are not features of 802.11ax that provide this functionality. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 226; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 216.
NEW QUESTION # 72
When a client station sends a broadcast probe request frame with a wildcard SSID, how do APs respond?
- A. For each probe request frame, only one AP may reply with a probe response.
- B. After waiting a SIFS, all APs reply at the same time with a probe response.
- C. Each AP responds in turn after preparing a probe response and winning contention.
- D. Each AP checks with the DHCP server to see if it can respond and then acts accordingly.
Answer: C
Explanation:
In the 802.11 wireless networking protocols, when a client station sends a broadcast probe request frame with a wildcard SSID (Service Set Identifier), it is essentially asking for any nearby access points (APs) to identify themselves. The way APs respond to such a probe request is governed by standard 802.11 behavior, which includes:
* Probe Request Handling: Upon receiving a broadcast probe request, each AP that can serve the client prepares a probe response. The response includes information about the AP, such as its SSID, supported data rates, and other capabilities.
* Contention-Based Mechanism: Wireless networks use a contention-based mechanism (CSMA/CA - Carrier Sense Multiple Access with Collision Avoidance) for medium access. Each AP must wait for a clear channel and win the contention process before it can send its probe response.
* Independent Responses: Each AP operates independently in responding to the probe request. There is no coordination between APs to decide which one responds first or at all, leading to multiple APs sending probe responses, each after winning the contention for the medium.
Option A accurately reflects this process, indicating that each AP prepares and sends a probe response in turn, contingent upon winning the medium contention. The other options suggest mechanisms (such as coordination with a DHCP server or simultaneous responses after a Short Interframe Space (SIFS)) that do not align with standard 802.11 procedures for handling broadcast probe requests.
References:
* IEEE 802.11 Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications.
* CWNA Certified Wireless Network Administrator Official Study Guide: Exam PW0-105, by David D.
Coleman and David A. Westcott.
NEW QUESTION # 73
In an 802.11 2.4 GHz system, what 22 MHz channels are considered non-overlapping?
- A. 2 and 8
- B. 7 and 11
- C. 4 and 6
- D. 1 and 5
Answer: D
Explanation:
In the 2.4 GHz frequency band used for 802.11 wireless networks, the channel bandwidth is typically 20 MHz, but the actual frequency spread of each channel is about 22 MHz due to the modulation techniques used. This spread causes overlap between adjacent channels, which can lead to interference and degrade network performance. To avoid this, it's essential to use non-overlapping channels.
The three non-overlapping channels in the 2.4 GHz band are 1, 6, and 11. Each of these channels is spaced sufficiently apart to avoid interference with each other:
* Channel 1: Centered at 2.412 GHz.
* Channel 6: Centered at 2.437 GHz.
* Channel 11: Centered at 2.462 GHz.
Given the options provided, option C (1 and 5) is the closest to a pair of non-overlapping channels, although in practice, channel 5 would still cause some interference with channel 1 due to the 22 MHz spread. The ideal choice for non-overlapping channels would be any two channels among 1, 6, and 11, but this is not an option provided. Therefore, within the given options, 1 and 5 are the best choice, understanding that in a real-world scenario, 1 and 6 or 6 and 11 would be preferred to avoid overlap.
References:
CWNA Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109, by David D.
Coleman and David A. Westcott.
Understanding 2.4 GHz channel arrangement and interference patterns in 802.11 wireless networks.
NEW QUESTION # 74
You are performing a post-implementation validation survey. What basic tool can be used to easily locate areas of high co-channel interference?
- A. Throughput tester
- B. Laptop-based spectrum analyzer
- C. Access point spectrum analyzer
- D. Wi-Fi scanner
Answer: D
Explanation:
A Wi-Fi scanner is a basic tool that can be used to easily locate areas of high co-channel interference. A Wi-Fi scanner is a software application that can run on a laptop, tablet, smartphone, or other device that has a Wi-Fi adapter. A Wi-Fi scanner can scan the wireless environment and display information about the detected access points and client stations, such as their SSID, BSSID, channel, signal strength, security, and data rate. A Wi-Fi scanner can also show the channel utilization and overlap of different access points, which can indicate the level of co-channel interference. Co-channel interference is a type of interference that occurs when multiple access points use the same or adjacent channels within the same coverage area. Co-channel interference can reduce the throughput and performance of the WLAN, as the access points and client stations have to contend for the channel access and avoid collisions. To identify areas of high co-channel interference, a Wi-Fi scanner can be used to measure the signal strength and channel utilization of different access points and compare them with a threshold or a baseline. Alternatively, a Wi-Fi scanner can also use a color-coded heat map to visualize the co-channel interference level in different locations. References: 1, Chapter 7, page
279; 2, Section 4.3
NEW QUESTION # 75
You are using a tool that allows you to see signal strength for all Aps in the area with a visual representation.
It shows you SSIDs available and the security settings for each SSID. It allows you to filter by frequency band to see only 2.4 GHz networks or only 5 GHz networks. No additional features are available.
What kind of application is described?
- A. Spectrum analyzer
- B. Site survey utility
- C. WLAN scanner tool
- D. Protocol analyzer
Answer: C
Explanation:
The tool described is a WLAN (Wireless Local Area Network) scanner tool. WLAN scanner tools are designed to provide information about the wireless networks in a given area, including:
* Signal Strength: They show the signal strength of all access points (APs) in the vicinity, which is crucial for understanding the coverage area and potential interference.
* SSID Visualization: These tools display the SSIDs (Service Set Identifiers) of available networks, allowing users to identify different wireless networks easily.
* Security Settings Information: WLAN scanner tools often show the type of security implemented on each network, such as WPA2, WEP, etc.
* Frequency Band Filtering: They allow users to filter and view networks based on the frequency band (2.4 GHz or 5 GHz), which is useful for analyzing network distribution and planning.
While protocol analyzers, site survey utilities, and spectrum analyzers are also used in wireless networking, their functions are distinct from what is described:
* Protocol Analyzers are more sophisticated and are used to capture and analyze network traffic.
* Site Survey Utilities are used to map signal coverage and plan network layouts, often with more advanced features for detailed site surveys.
* Spectrum Analyzers provide a detailed view of the frequency spectrum and non-Wi-Fi interference but don't typically focus on SSIDs or security settings.
Thus, the correct answer is D, a WLAN scanner tool, based on the functionalities described.
References:
CWNA Certified Wireless Network Administrator Official Study Guide: Exam PW0-105, by David D.
Coleman and David A. Westcott.
Tools and techniques for wireless network analysis and troubleshooting.
NEW QUESTION # 76
You are troubleshooting a controller-based AP that is unable to locate the controller. DHCP is not use and the controller is located at 10.10.10.81/24 while the AP is on the 10.10.16.0/24 network. What should be inspected to verify proper configuration?
- A. BOOTH
- B. DNS
- C. AP hosts file
- D. NTP
Answer: B
Explanation:
What should be inspected to verify proper configuration is DNS. DNS stands for Domain Name System and is a service that resolves hostnames to IP addresses. In a controller-based AP deployment, DNS can be used to help the AP locate the controller by using a predefined hostname such as CISCO-CAPWAP-CONTROLLER or aruba-master. The AP sends a DNS query for this hostname and receives an IP address of the controller as a response. Therefore, if DNS is not configured properly or if there is no DNS entry for the controller hostname, the AP may not be able to locate the controller. NTP, BOOTP, and AP hosts file are not relevant for this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide:
ExamCWNA-109], page 374; [CWNA: Certified Wireless Network Administrator Official Study Guide:
ExamCWNA-109], page 364.
NEW QUESTION # 77
What frame type is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS?
- A. Beacon
- B. ACK
- C. RTS
- D. PS-Poll
Answer: C
Explanation:
The frame type that is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS is RTS. RTS stands for Request to Send and is a control frame that is sent by a station to request access to the medium for a specified duration. The RTS frame contains the source and destination MAC addresses, as well as a Network Allocation Vector (NAV) value that indicates how long the medium will be occupied. The destination station responds with a Clear to Send (CTS) frame that echoes the NAV value and grants permission to the source station. All other stations in the BSS hear either the RTS or CTS frame and update their NAV timers accordingly, deferring their transmissions until the medium is free. The RTS/CTS mechanism can be used to prevent hidden node problems, reduce collisions, and protect high data rate frames that use features such as 802.11n or 802.11ac that may not be compatible with legacy stations. ACK, Beacon, and PS-Poll are not used to reserve the medium for high data rate frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 112; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 102.
NEW QUESTION # 78
XYZ Company has decided to install an 802.11 WLAN system that will support 1083 wireless users, but they are concerned about network security. XYZ is interested in deploying standardized security features. In addition to WPA2-Enterprise with PEAP and role-based access control, XYZ would like to support management frame protection as well as a fast secure roaming protocol for future mobile handsets.
As XYZ Company selects a product to deploy, what two IEEE amendments, which are included in 802.11-
2016, and 802.11-2020 should be supported to provide the management frame protection and fast secure roaming security features?
- A. 802.11j and 802.11k
- B. 802.11r and 802.11w
- C. 802.11k and 802.11v
- D. 802.11j and 802.11z
Answer: B
Explanation:
The two IEEE amendments that should be supported to provide the management frame protection and fast secure roaming security features are 802.11r and 802.11w12.
* 802.11r (Fast BSS Transition): This amendment to the IEEE 802.11 standard permits continuous connectivity aboard wireless devices in motion, with fast and secure client transitions from one Basic Service Set to another1.
* 802.11w (Management Frame Protection): This amendment increases the security of its management frames2.
NEW QUESTION # 79
You administer a WLAN that offers a guest SSID of GUESTNWORK. Users connect to the GUESTNWORK SSID, but report that they cannot browse the Internet. The devices simply report no Internet connection. What common problem causes this scenario?
- A. NTP issues
- B. Captive portal issues
- C. Hardware issues
- D. IP routing issues
Answer: B
Explanation:
A common problem that causes this scenario is captive portal issues. A captive portal is a web page that requires users to authenticate or accept terms and conditions before accessing the Internet through a WLAN.
A captive portal is often used for guest networks to provide security and control over the network access. A captive portal works by intercepting the user's web requests and redirecting them to the portal page until the user completes the required action. However, sometimes the captive portal may not work properly due to various reasons, such as browser settings, firewall rules, DNS configuration, or network errors. This can prevent the user from browsing the Internet or seeing the portal page. To troubleshoot captive portal issues, you can try to use a different browser, clear the browser cache and cookies, disable any VPN or proxy settings, manually enter the portal URL, or contact the network administrator. NTP issues, hardware issues, or IP routing issues are not common problems that cause this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 343; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 333.
NEW QUESTION # 80
An RF signal sometimes bends as it passes through some material other than free space. What is the term that describes this behavior?
- A. Scattering
- B. Reflection
- C. Refraction
- D. Warping
Answer: C
Explanation:
Refraction is the bending of an RF signal as it passes through a medium with a different density than free space. This can cause the signal to change its direction and speed, which can affect the accuracy and reliability of wireless communication. Refraction is influenced by factors such as temperature, humidity, and atmospheric pressure12. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 72; CWNA-109Study Guide, Chapter 2: Radio Frequency Fundamentals, page 67.
NEW QUESTION # 81
XYZ Company has decided to install an 802.11 WLAN system that will support 1083 wireless users, but they are concerned about network security. XYZ is interested in deploying standardized security features. In addition to WPA2-Enterprise with PEAP and role-based access control, XYZ would like to support management frame protection as well as a fast secure roaming protocol for future mobile handsets.
As XYZ Company selects a product to deploy, what two IEEE amendments, which are included in
802.11-2016, and 802.11-2020 should be supported to provide the management frame protection and fast secure roaming security features?
- A. 802.11j and 802.11k
- B. 802.11r and 802.11w
- C. 802.11k and 802.11v
- D. 802.11j and 802.11z
Answer: B
Explanation:
The two IEEE amendments that should be supported to provide the management frame protection and fast secure roaming security features are 802.11r and 802.11w12.
* 802.11r (Fast BSS Transition): This amendment to the IEEE 802.11 standard permits continuous connectivity aboard wireless devices in motion, with fast and secure client transitions from one Basic Service Set to another1.
* 802.11w (Management Frame Protection): This amendment increases the security of its management frames2.
NEW QUESTION # 82
Lynne runs a small hotel, and as a value added service for his customers he has implemented a Wi-Fi hot-spot.
Lynne has read news articles about how hackers wait at hot-spots trying to take advantage of unsuspecting users. He wants to avoid this problem at his hotel.
What is an efficient and practical step that Lynne can take to decrease the likelihood of active attacks on his customers' wireless computers?
- A. Implement an SSL VPN in the WLAN controller that initiates after HTTPS login.
- B. Require EAP-FAST authentication and provide customers with a username/password on their receipt.
- C. Implement Network Access Control (NAC) and require antivirus and firewall software along with OS patches.
- D. Enable station-to-station traffic blocking by the access points in the hotel.
Answer: D
Explanation:
In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical step is:
* Station-to-Station Traffic Blocking: Also known as client isolation, this feature prevents direct communication between devices connected to the Wi-Fi network. By enabling this on the access points, Lynne can significantly decrease the likelihood of active attacks like man-in-the-middle (MITM) attacks, where an attacker intercepts and possibly alters the communication between two parties.
The other options, while beneficial for network security, might not be as straightforward or practical for Lynne's situation:
* Network Access Control (NAC)requires a more complex infrastructure and management, which might not be ideal for a small hotel setup.
* Implementing an SSL VPNadds an extra layer of security but might complicate the login process for users, potentially affecting the user experience.
* Requiring EAP-FAST authenticationprovides secure authentication but may not be feasible for transient customers who expect quick and easy network access.
Therefore, enabling station-to-station traffic blocking is a practical and efficient measure that Lynne can implement to enhance customer security on the Wi-Fi network.
References:
* CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D: Coleman and David A. Westcott.
* Best practices for securing a wireless network in a public hotspot environment.
NEW QUESTION # 83
An 802.11-based network uses an AP and has several connecting clients. The clients include iPhones, iPads, laptops and one desktop. What WLAN use case is represented?
- A. IBSS
- B. Ad-hoc
- C. WPAN
- D. BSS
Answer: D
Explanation:
A BSS (Basic Service Set) is a WLAN use case that represents an 802.11-based network that uses an AP (Access Point) and has several connecting clients. The AP acts as a central point of coordination and communication for the clients, which can include iPhones, iPads, laptops, desktops, or any other devices that have Wi-Fi capabilities. A BSS can be identified by a unique BSSID (Basic Service Set Identifier), which is usually the MAC address of the AP's radio interface. A BSS can also be associated with an SSID (Service Set Identifier), which is a human-readable name that identifies the network. References: , Chapter 1, page 23; , Section 1.1
NEW QUESTION # 84
What cipher suite is specified by the 802.11-2016 standard and is not deprecated?
- A. Extensible Authentication Protocol
- B. Temporal Key Integrity Protocol
- C. Counter Mode with CBC-MAC Pro tocol
- D. Wired Equivalent Privacy
Answer: C
Explanation:
The cipher suite specified by the 802.11-2016 standard and is not deprecated is Counter Mode with CBC- MAC Protocol (CCMP). CCMP is an encryption protocol that uses Advanced Encryption Standard (AES) as the underlying cipher and provides confidentiality, integrity, and origin authentication for wireless data.
CCMP is the mandatory encryption protocol for WPA2 and WPA3. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-109], page 295; [IEEE Standard for Information technology-Telecommunications and information exchange between systems Local and metropolitan area networks-Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications], page 1560.
NEW QUESTION # 85
You manage a WLAN with 100 802.11ac access points. All access points are configured to use 80 MHz channels. In a particular BSS, only 40 MHz communications are seen. What is the likely cause of this behavior?
- A. The clients are all 802.11n STAs or lower
- B. All clients implement single spatial stream radios
- C. The AP is improperly configured to use only 40 MHz of the 80 MHz allocated bandwidth
- D. The short guard interval is also enabled
Answer: A
Explanation:
https://7signal.com/802-11ac-migration-part-2-whats-nobodys-telling-you-about-80mhz-and-160mhz-channel-bo The clients are all 802.11n STAs or lower is the likely cause of this behavior. If a WLAN with 100 802.11ac access points is configured to use 80 MHz channels, butonly 40 MHz communications are seen in a particular BSS, it means that the clients in that BSS do not support 80 MHz channels. This could be because they are using older standards, such as 802.11n or lower, that do not support 80 MHz channels. Alternatively, they could be using newer standards, such as 802.11ac or ax, but have their channel width settings limited to 40 MHz or lower due to device capabilities or configuration options. In either case, the AP will adapt to the client's channel width and use only 40 MHz of the 80 MHz allocated bandwidth to communicate with them.
This will reduce the potential throughput and efficiency of the WLAN. References: , Chapter 3, page 111; , Section 3.2
NEW QUESTION # 86
When an ACK frame is not received by the transmitting STA, what is assumed?
- A. The frame was not delivered and must be retransmitted
- B. The frame was correctly delivered
- C. The receiver processed the frame, but did not respond with an ACK frame because 802.11w is enabled
- D. The receiver is offline
Answer: A
Explanation:
An ACK (Acknowledgement) frame is a short control frame that is sent by the receiver of a data or management frame to confirm that the frame was received correctly. The ACK frame is sent after a SIFS (Short Interframe Space) interval, which is the shortest time gap between frames in 802.11. If the transmitter does not receive an ACK frame within a specified time, it assumes that the frame was not delivered and must be retransmitted. This is part of the 802.11 reliability mechanism that ensures reliable data delivery over an unreliable wireless medium . References: [CWNA-109 Study Guide], Chapter 5: IEEE 802.11 Medium Access, page 209; [CWNA-109Study Guide], Chapter 5: IEEE 802.11 Medium Access, page 203.
NEW QUESTION # 87
You are the network administrator for ABC Company. Your manager has recently attended a wireless security seminar. The seminar speaker taught that a wireless network could be hidden from potential intruders if you disabled the broadcasting of the SSID in Beacons and configured the access points not to respond to Probe Request frames that have a null SSID field.
Your manager suggests implementing these security practices. What response should you give to this suggestion?
- A. Any 802.11 protocol analyzer can see the SSID in clear text in frames other than Beacons frames. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames.
- B. This security practice prevents manufacturers' client utilities from detecting the SSID. As a result, the SSID cannot be obtained by attackers, except through social engineering, guessing, or use of a WIPS.
- C. To improve security by hiding the SSID, the AP and client stations must both be configured to remove the SSID from association request and response frames. Most WLAN products support this.
- D. Any tenants in the same building using advanced penetration testing tools will be able to obtain the SSID by exploiting WPA EAPOL-Key exchanges. This poses an additional risk of exposing the WPA key.
Answer: A
Explanation:
The response that you should give to your manager's suggestion of implementing the security practices of disabling the broadcasting of the SSID in Beacons and configuring the access points not to respond to Probe Request frames that have a null SSID field is that any 802.11 protocol analyzer can see the SSID in clear text in frames other than Beacons frames. This negates any security benefit of trying to hide the SSID in Beacons and Probe Response frames. The SSID (Service Set Identifier) is a human-readable name that identifies a WLAN and allows users to connect to it. The SSID is transmitted in clear text in several types of 802.11 frames, such as Beacon frames, Probe Request frames, Probe Response frames, Association Request frames, Association Response frames, Reassociation Request frames, and Reassociation Response frames. Some people may think that hiding the SSID can improve the security of the WLAN by making it invisible to potential intruders. However, this is not true, as hiding the SSID only removes it from Beacon frames and Probe Response frames that have a null SSID field. The SSID is still present in other types of frames that can be easily captured and analyzed by any 802.11 protocol analyzer or wireless scanner tool. Therefore, hiding the SSID does not provide any real security benefit and may even cause some compatibility and performance issues for legitimate users. References: 1, Chapter 4, page 133; 2, Section 4.1
NEW QUESTION # 88
......
CWNA-109 Exam Questions – Valid CWNA-109 Dumps Pdf: https://guidetorrent.dumpstorrent.com/CWNA-109-exam-prep.html