CWAP-403 Exam - Certified Wireless Analysis Professional

NEW QUESTION 1
The PLCP sublayer provides framing by adding a header to create what type of data unit?

• A. MSDU
• B. MPDU
• C. PSDU
• D. PPDU

Answer: D

NEW QUESTION 2
What is the difference between a Data frame and a QoS-Data frame?

• A. QoS Data frames include a QoS control field
• B. QoS Data frames include a QoS information element
• C. QoS Data frames include a DSCP control field
• D. QoS Data frames include an 802.1Q VLAN tag

Answer: A

NEW QUESTION 3
An RST frame should be acknowledged by which frame?

• A. Ack
• B. CTS
• C. Block Ack
• D. RTS-Ack

Answer: A

NEW QUESTION 4
During a VHT Transmit Beamforming sounding exchange, the beamformee transmits a Compressed Beamforming frame to the beamformer. What is communicated within this Compressed Beamforming frame?

• A. Steering Matrix
• B. Beamforming Matrix
• C. Feedback Matrix
• D. Beamformee Matrix

Answer: C

NEW QUESTION 5
What is the function of the PMD sub-layer?

• A. Converts 1s and 0s given to it by the PLCP sub-layer into the appropriate RF signals
• B. Provides framing
• C. Adds a PHY preamble and header to a PSDU
• D. Performs A-MPDU

Answer: A

NEW QUESTION 6
What is the default 802.11 authentication method for a STA when using Pre-RSNA?

• A. Open System
• B. Shared Key
• C. 4-Way Handshake
• D. PSK

Answer: A

NEW QUESTION 7
Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software.
When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?

• A. Authentication
• B. Reassociation
• C. 4-Way Handshake
• D. Probe Response

Answer: C

NEW QUESTION 8
You are performing a multiple adapter channel aggregation capture to troubleshoot a VoIP roaming problem and would like to measure the roaming time from the last VoIP packet sent on the old AP’s channel to the first VoIP packet sent on the new AP’s channel. Which timing column in the packet view would measure this for you?

• A. Delta
• B. Absolute
• C. Roaming
• D. Relative

Answer: C

NEW QUESTION 9
You’re the WLAN administrator for a large retailer based at the HQ in New York. The London-based office has been complaining about WLAN disconnections around lunch time each day. You suspect this might be interference from the staff microwave, how might you test your theory from the New York office?

• A. Access the microwave remotely and run a diagnostic check
• B. Ask a local member of staff to take some pictures of the microwave, including some close-ups of the door seal so that you can access it
• C. Place one of the London APs into spectrum analyzer mode and monitor the situation over lunch time
• D. Ask a local member of staff to change the frequency of the microwave and see if the disconnections stop

Answer: A

NEW QUESTION 10
How does a VoIP Phone, using WMM Power Save, request data frames buffered at the AP?

• A. The VoIP phone transmits a PS-Poll frame
• B. The VoIP phone transmits a trigger frame
• C. The VoIP phone sets the More Data bit in the MAC Header to 1
• D. The VoIP phone The VoIP transmits a WMM Action frame

Answer: B

NEW QUESTION 11
The network administrator at ABC Engineering has taken a large packet capture from one of their APs running in monitor mode. She has very little knowledge of 802.11 protocols but would like to use the capture file to evaluate the overall health and performance of their wireless network. When she asks your advice, which tool do you recommend she opens the packet capture file with?

• A. Capture visualization tool
• B. Protocol analyzer
• C. Spectrum analyzer
• D. WLAN scanner

Answer: B

NEW QUESTION 12
When configuring a long term, forensic packet capture and saving all packets to disk which of the following is not a consideration?

• A. Total capture storage space
• B. Individual trace file size
• C. Real-time packet decodes
• D. Analyzer location

Answer: B

NEW QUESTION 13
802.11 k Neighbor Requests and Neighbor Reports are sent in what type of Management Frames?

• A. RRM
• B. Action
• C. Beacon
• D. Reassociation Request and Reassociation Response

Answer: C

NEW QUESTION 14
In a Spectrum Analyzer the Swept Spectrogram plot displays what information?

• A. The RF time domain
• B. RF power present at a particular frequency over the course of time
• C. Wi-Fi Device information
• D. Duty cycle in the frequency domain

Answer: D

NEW QUESTION 15
When would you expect to see a Reassociation Request frame?

• A. Every time a STA associates to an AP to which it has previously been associated
• B. Only when a STA is using FT roaming
• C. Only when a STA roams back to an AP it has previously been associated with
• D. Every time a STA roams

Answer: D

NEW QUESTION 16
Which one of the best following is an advantage of using display filters instead of capture-time filters?

• A. Display filters allow for focused analysis on just the packets of interest
• B. Once created display filters are reusable for later captures
• C. Display filters only hide the packets from view and the filtered packets can be enabled for view later
• D. Multiple display filters can be applied simultaneously

Answer: A

Explanation:
display filters allow you to focus on things of interest and to ignore things you don't care about.

NEW QUESTION 17
What Interframe space would be expected between a CTS and a Data frame?

• A. SIFS
• B. DIFS
• C. AIFS
• D. PIFS

Answer: A

NEW QUESTION 18
Why would a STA that supports 802.11k Radio Measurement send a Neighbor Request to an AP?

• A. To learn about neighboring interference sources and tune its RF radio accordingly
• B. To inform the current AP about the STA’s intent to roam to a neighboring AP, ensuring a seamless handover
• C. To request a list of neighboring APs which the STA can use as roaming candidates
• D. To request a list of neighboring STAs which enables the STA to better pick the right protection mechanisms

Answer: C

NEW QUESTION 19
Where would you look in a packet trace file to identify the configured Minimum Basic Rate (MBR) of a BSS?

• A. Supported Rates & Extended Supported Rates elements in a Beacon frame
• B. In the MBR Action frame
• C. In the Minimum Basic Rate Element in a Beacon frame
• D. In the MBR Information Element in an Association Response frame

Answer: A

NEW QUESTION 20
Which one of the statements regarding the Frame Control field in an 802.11 MAC header is true?

• A. Only Control frames have a Frame Control field
• B. The Frame Control field contains three sub-fields and eight one-bit flags
• C. The Frame Control field is used to communicate the duration value
• D. The Frame Control field is always set to 0

Answer: D

Explanation:
This field is simply used to indicate which protocol version of 802.11 is being used by the frame. This is always set to “0”

NEW QUESTION 21
When performing protocol analysis, you notice a high number of RTS/CTS frames being transmitted on an HT network. You suspect this may be due to HT protection mechanisms. Where in the Beacon frame would you look to determine which one of the four HT protection modes the AP is operating in?

• A. HT Protection Element
• B. HT Information Element
• C. HT Operation Element
• D. Non-HT Present Element

Answer: A

NEW QUESTION 22
Which one of the following is not a valid reason for an AP to fail a STAs association?

• A. Requesting station has the wrong PSK
• B. Does not support the specified authentication algorithm
• C. AP is unable to handle additional associations
• D. Requesting station does not support all the required data rates

Answer: A

NEW QUESTION 23
......