CWAP-405 Sample Questions & Answers
Analyzing roaming behavior and data-frame exchanges is the single biggest topic, alongside MAC-layer frame encapsulation, 802.11 capture with analyzer options, device signatures from spectrum captures, PHY technologies in action, and contention with QoS.
Launch the full CWAP-405 simulator →Showing 10 of 20 free samples.
- Question 1Intermediate
PHY Layers and Technologies · Identify and use PHY information provided in pseudo-headers within protocol analyzers
An analyst examines a captured 802.11ax frame using Wireshark. The Radiotap header contains the "HE Information" field. Within this field, BSS Color is set to 12, and the UL/DL flag is set to 1 (Uplink). What is the primary purpose of the BSS Color value in this context?
Show answer & explanation
Correct answer: B
BSS Coloring is a spatial reuse technique introduced in 802.11ax. A station can detect a frame from an OBSS and, if the signal is below a certain threshold, ignore it and transmit simultaneously, even if its carrier sense mechanism would normally defer. The BSS color is a value from 1-63 that identifies frames belonging to a particular BSS, allowing STAs to make this differentiation and improving medium efficiency in dense environments.
- Question 2IntermediateSelect 2
MAC Sublayer and Functions · Validate BSS capabilities through protocol analysis
A network administrator needs to verify that an access point is correctly advertising support for WPA3-Personal and 802.11k for assisted roaming. Which TWO of the following Information Elements should be present and correctly configured in the AP's Beacon and Probe Response frames? (Select TWO)
Show answer & explanation
Correct answers: B, E
The RSN (Robust Security Network) Information Element is used to advertise the security capabilities of the BSS. For WPA3-Personal, the AKM suite selector within the RSN IE would be set to indicate support for SAE (Simultaneous Authentication of Equals).
The RM (Radio Measurement) Enabled Capabilities element (part of the 802.11k amendment) is used to indicate that the AP supports radio measurement features, such as providing Neighbor Reports to clients, which is a key part of 802.11k assisted roaming.
- Question 3Beginner
WLAN Medium Access · Understand 802.11 contention algorithms in-depth and know how they impact WLANs
True or False: In the 802.11 DCF contention mechanism, a station that wins contention and transmits a frame must wait for a DIFS period plus a new random backoff before transmitting its next frame, even if the medium remains idle after it receives the ACK.
Show answer & explanation
Correct answer: A
This statement is true. DCF is designed to provide fair access to the medium. To prevent a single station from monopolizing the channel, every station must contend for each transmission opportunity. After a successful transmission (frame and ACK), the station must wait for the medium to be idle for a DIFS period and then begin a new random backoff procedure before it can transmit again.
- Question 4Advanced
Spectrum Analysis · Analyze spectrum captures to identify relevant RF information and issues
A spectrum analyzer in a dense office environment shows the following on the 2.4 GHz band: A strong 802.11g signal centered on channel 6. Another slightly weaker 802.11g signal is also visible, centered on channel 7. The energy from the channel 7 signal bleeds significantly into the frequency space of channel 6. How should this interference be classified, and what is its primary impact?
Show answer & explanation
Correct answer: B
This is a classic example of Adjacent Channel Interference (ACI). The AP on channel 7 is 'adjacent' but also 'overlapping' with channel 6. Unlike CCI, where devices on the same channel can understand each other's transmissions and defer properly, ACI introduces raw RF energy (noise) into the adjacent channel. This raises the noise floor and can corrupt frames, preventing clear reception and decoding, which leads to retransmissions and poor performance. CCI is interference from a device on the same channel.
- Question 5Intermediate
802.11 Frame Exchanges · Analyze data frame exchanges
A protocol capture of a file transfer shows an AP sending a Block Ack Request (BAR) frame to a client. The BAR frame's 'Starting Sequence Number' is 100. The client responds with a Block Ack (BA) frame. The BA's bitmap field, when decoded, indicates that frames with sequence numbers 101, 102, and 104 were received successfully, but 100 and 103 were not. What will the AP do next?
Show answer & explanation
Correct answer: A
The Block Ack mechanism allows for selective retransmission. The bitmap in the Block Ack frame informs the transmitter exactly which frames in the block were received successfully. The AP will use this information to retransmit only the missing frames, which in this case are those with sequence numbers 100 and 103. This is much more efficient than retransmitting the entire block.
- Question 6Intermediate
Protocol Analysis · Understand and apply the common capture configuration parameters available in protocol analysis tools
A network engineer is tasked with capturing traffic over a long period in a high-traffic environment to diagnose an intermittent connectivity issue. The engineer is concerned about the capture file growing too large and filling the disk. The analysis only requires examining MAC headers and the full contents of management and control frames, not the data payloads of user traffic. Which capture configuration parameter should be adjusted to achieve this?
Show answer & explanation
Correct answer: B
Packet slicing, often configured via the 'snapshot length' or 'snaplen' parameter, instructs the capture engine to save only the first N bytes of each frame. Setting a snaplen of around 256 bytes is typically sufficient to capture the full MAC header and the entire body of most management and control frames (which are small), while truncating the large data payloads of Data frames. This dramatically reduces the capture file size without losing the required header and management frame information.
- Question 7Intermediate
WLAN Medium Access · Understand 802.11 contention algorithms in-depth and know how they impact WLANs
Station A sends an RTS frame to an AP. The Duration/ID field in the RTS is set to a value of 1500 µs. Station B is within range of Station A and hears this RTS, but it is out of range of the AP and will not hear the subsequent CTS. What action will Station B take upon receiving the RTS frame?
Show answer & explanation
Correct answer: B
The RTS/CTS mechanism is designed to combat the hidden node problem. Any station that hears either the RTS or the CTS will update its Network Allocation Vector (NAV) based on the Duration/ID value in the frame. This is known as virtual carrier sense. Station B, having heard the RTS, will set its NAV for 1500 µs and will not attempt to access the medium until this timer expires, even though it cannot hear the AP's CTS or the subsequent data transmission.
- Question 8Advanced
PHY Layers and Technologies · Understand and describe the functions of the PHY layer and the PHY protocol data units (PPDUs)
You are analyzing a packet capture from an 802.11ax network. You observe a Trigger frame sent by the AP, followed by simultaneous uplink data frames from multiple clients. How does the AP communicate to each individual client which specific set of subcarriers (Resource Unit) it should use for its uplink transmission?
Show answer & explanation
Correct answer: C
The Trigger frame is the core of uplink multi-user (OFDMA and MU-MIMO) coordination in 802.11ax. The AP sends a single Trigger frame which contains multiple 'User Info' fields. Each User Info field is addressed to a specific client (by its Association ID) and contains instructions for that client, including which Resource Unit (RU) to transmit on, the target power level, and the modulation and coding scheme (MCS) to use.
- Question 9Intermediate
MAC Sublayer and Functions · Validate BSS capabilities through protocol analysis
While analyzing a Beacon frame from a corporate SSID, you inspect the RSN Information Element. You see one Pairwise Cipher Suite selector for CCMP and two AKM Suite selectors: one for 802.1X and one for PSK. What does this configuration imply about the BSS?
Show answer & explanation
Correct answer: B
The RSN IE advertises the security capabilities. The Pairwise Cipher Suite (CCMP) defines the encryption used for unicast traffic. The Authentication and Key Management (AKM) Suite defines the authentication method. Advertising both 802.1X and PSK in the AKM suite list means the AP is configured to allow clients to connect to this single SSID using either enterprise credentials (username/password/certificate) or a pre-shared key. This is a common feature on enterprise-grade equipment.
- Question 10Advanced
802.11 Frame Exchanges · Capture, understand, and analyze BSS discovery and joining frame exchanges
A mobile client is performing a fast roam between two APs on the same ESS. A frame capture shows the client exchanging Authentication frames containing Mobility Domain and FT IEs directly with the target AP before sending a Reassociation Request. What type of FT roam is being performed, and what is a key characteristic of this method?
Show answer & explanation
Correct answer: C
The scenario describes Over-the-Air Fast BSS Transition. The key indicator is the direct exchange of Authentication frames (containing FT Action details) between the client and the target AP over the wireless medium. This happens before the Reassociation Request. This method is extremely fast because it bypasses the need to route FT Action frames through the wired distribution system (as Over-the-DS FT does), making it ideal for latency-sensitive applications like VoIP.
Ready for the real thing?
The full CWAP-405 simulator has every exam-style question, timed mode, and instant scoring.