View Full CWNP CWNA-109 Exam Dumps and Practice Test Dumps

 

Question 121.

Which 802.11 frame type carries higher-layer user data across the wireless medium?

1. Data frame
   2. Control frame
   3. Beacon frame
   4. Management frame only

Correct Answer: 1. Data frame

Explanation:

802.11 data frames are primarily responsible for carrying higher-layer information such as IP packets across the wireless medium. Management frames support functions such as discovery, authentication, association, and roaming, while control frames help coordinate access to the medium and acknowledge transmissions. Beacon frames are a specific type of management frame. WLAN professionals should understand the three major 802.11 frame categories because protocol analysis depends on recognizing whether a captured frame is managing the connection, coordinating medium access, or transporting user data. This distinction is useful when troubleshooting authentication failures, roaming issues, retransmissions, and application traffic problems.

Question 122.

Which 802.11 control frame is sent in response to a successfully received unicast frame that requires acknowledgment?

1. Beacon
   2. ACK
   3. Probe Request
   4. Association Request

Correct Answer: 2. ACK

Explanation:

An ACK control frame confirms successful receipt of many unicast 802.11 frames. If the sender does not receive the expected acknowledgment, it may treat the transmission as unsuccessful and retry according to 802.11 rules. Beacon, Probe Request, and Association Request frames are management frames with different purposes. The ACK mechanism helps compensate for the unreliable nature of the RF medium, but retransmissions consume airtime. Therefore, high retry rates can significantly reduce WLAN capacity and may indicate interference, weak signal quality, collisions, hidden nodes, or excessive contention. Protocol captures can help identify whether retransmissions are occurring at abnormal levels.

Question 123.

Which 802.11 management frame is transmitted periodically by an access point to advertise the existence and capabilities of its BSS?

1. CTS
   2. ACK
   3. Beacon
   4. RTS

Correct Answer: 3. Beacon

Explanation:

Beacon frames are periodically transmitted management frames that advertise important information about a Basic Service Set. They can include the SSID, supported data rates, timing information, security capabilities, and other operational parameters. CTS, ACK, and RTS are control frames rather than management frames. Beacons are important during passive scanning because clients can listen for them to discover available WLANs. They also consume airtime, especially when many SSIDs are configured or when low basic rates are used. For this reason, WLAN design should avoid excessive SSID counts and should carefully consider supported and basic data rates.

Question 124.

Which frame is sent by a client during active scanning to discover nearby WLANs?

1. Deauthentication
   2. Association Response
   3. Block ACK
   4. Probe Request

Correct Answer: 4. Probe Request

Explanation:

During active scanning, a client transmits Probe Request management frames to discover nearby WLANs. Access points may respond with Probe Response frames containing information about the available BSS. Passive scanning differs because the client listens for Beacon frames without actively transmitting discovery requests. Association Response and Deauthentication frames serve different management functions, while Block ACK is a control mechanism. Understanding scanning behavior is important for roaming and troubleshooting because a client must discover suitable candidate access points before it can choose where to associate. Excessive probing can also contribute to management-frame overhead in dense environments.

Question 125.

Which frame is normally transmitted by an access point after receiving an applicable Probe Request from a client?

1. Probe Response
   2. Deauthentication
   3. CTS
   4. Association Request

Correct Answer: 1. Probe Response

Explanation:

A Probe Response is a management frame sent by an access point in response to an applicable Probe Request. It contains information about the BSS, such as supported capabilities and other network parameters, allowing the client to evaluate whether the WLAN is suitable. Deauthentication terminates authentication state, CTS is a control frame, and Association Request is generated by the client later in the connection process. Probe Request and Probe Response exchanges are an important part of active scanning and can be observed with a wireless protocol analyzer when troubleshooting discovery or roaming problems.

Question 126.

Which step establishes the logical membership of a client in an infrastructure BSS?

1. DHCP
   2. Association
   3. DNS resolution
   4. ARP

Correct Answer: 2. Association

Explanation:

Association establishes the logical relationship between a client station and an access point in an infrastructure WLAN. Before higher-layer networking can occur, the client typically discovers the WLAN, performs the required 802.11 authentication procedure, and then sends an Association Request. The access point responds with an Association Response indicating success or failure. DHCP, DNS, and ARP operate at higher network layers and occur after sufficient wireless connectivity has been established. When a client cannot obtain network access, troubleshooting should determine whether the failure occurs during 802.11 association, security authentication, IP configuration, or later application-layer communication.

Question 127.

Which management frame can be used to terminate the association relationship between a station and an access point?

1. Beacon
   2. Probe Response
   3. Disassociation
   4. ACK

Correct Answer: 3. Disassociation

Explanation:

A Disassociation frame terminates the association relationship between a client and an access point. This differs from Deauthentication, which terminates authentication state. Although both can result in a client losing connectivity, they represent distinct 802.11 management operations. Beacon and Probe Response frames advertise or provide information about a BSS, while ACK confirms successful receipt of certain frames. Packet captures showing Disassociation or Deauthentication frames can provide valuable clues during troubleshooting, especially when reason codes indicate why the connection ended or which side initiated the event.

Question 128.

Which 802.11 concept enables a station to reserve the medium virtually based on duration information contained in received frames?

1. DHCP lease timer
   2. VLAN ID
   3. TCP window
   4. Network Allocation Vector**

Correct Answer: 4. Network Allocation Vector

Explanation:

The Network Allocation Vector, or NAV, supports virtual carrier sensing in 802.11. When a station receives a frame containing duration information, it can update its NAV to indicate how long the medium is expected to remain reserved. During that time, the station generally defers its own transmissions. The NAV works alongside physical carrier sensing as part of collision avoidance. DHCP timers, VLAN IDs, and TCP windows operate at higher layers and are unrelated to RF medium reservation. Understanding the NAV helps explain the behavior of RTS/CTS exchanges and how stations coordinate shared channel access.

Question 129.

Which mechanism can help reduce collisions caused by hidden nodes?

1. RTS/CTS
   2. DNS caching
   3. NAT
   4. DHCP relay

Correct Answer: 1. RTS/CTS

Explanation:

RTS/CTS can help reduce collisions caused by hidden nodes. A station sends a Request to Send frame, and the intended receiver replies with Clear to Send. Stations hearing the exchange can update their virtual carrier-sense timers and defer transmission, helping protect the upcoming data exchange. DNS caching, NAT, and DHCP relay do not affect wireless medium access. RTS/CTS adds overhead, so it is not always beneficial to use it for every transmission. It is most useful when hidden-node conditions are actually present and causing enough collisions or retries to justify the additional control frames.

Question 130.

Which statement best describes why Wi-Fi uses CSMA/CA rather than traditional Ethernet CSMA/CD?

1. Wi-Fi frames contain no MAC addresses
   2. Wireless stations cannot reliably detect collisions while transmitting, so they attempt to avoid them
   3. Wi-Fi does not share a medium
   4. Ethernet uses only full-duplex communication

Correct Answer: 2. Wireless stations cannot reliably detect collisions while transmitting, so they attempt to avoid them

Explanation:

Wireless stations cannot reliably transmit and simultaneously detect collisions in the same manner used by traditional shared half-duplex Ethernet. Therefore, 802.11 uses Carrier Sense Multiple Access with Collision Avoidance. Stations sense the medium, wait required interframe spaces, use random backoff, and rely on acknowledgments and retransmissions. Wi-Fi absolutely is a shared-medium technology, and 802.11 frames contain MAC addresses. Modern switched Ethernet is usually full duplex, but the historical distinction between CSMA/CD and CSMA/CA comes from how wired and wireless shared media handle collisions. Understanding this difference is fundamental to WLAN capacity and contention behavior.

Question 131.

Which process determines how long a station waits randomly before transmitting after the required contention interval?

1. Random backoff
   2. DHCP renewal
   3. Route convergence
   4. DNS recursion

Correct Answer: 1. Random backoff

Explanation:

Random backoff is a key part of the 802.11 contention process. After the medium becomes available and the required interframe space has elapsed, a station chooses a random value from a contention window and counts it down while the channel remains idle. If the medium becomes busy, the counter freezes and resumes later. This mechanism reduces the chance that multiple stations begin transmitting at exactly the same time. DHCP renewal, routing, and DNS operate at higher layers. As more clients contend for the same channel, random backoff and waiting periods contribute to increased latency and reduced effective throughput.

Question 132.

Which condition causes an 802.11 station’s backoff timer to pause?

1. The client obtains an IP address
   2. The medium becomes busy
   3. The SSID is hidden
   4. The AP changes its BSSID

Correct Answer: 2. The medium becomes busy

Explanation:

A station’s backoff counter decreases while the wireless medium remains idle according to the required contention rules. If another station begins transmitting and the medium becomes busy, the station freezes its backoff counter rather than continuing to count down. Once the medium is idle again for the required interval, countdown can resume. This behavior supports fairer access and reduces collision probability. IP addressing, SSID visibility, and BSSID changes do not directly determine whether the contention backoff timer pauses. Heavy channel utilization therefore increases waiting time because stations repeatedly defer to other transmissions.

Question 133.

Which interframe space is designed to allow high-priority responses such as acknowledgments to occur before normal contention resumes?

1. SIFS
   2. DHCP interval
   3. Beacon interval
   4. TCP retransmission timer

Correct Answer: 1. SIFS

Explanation:

The Short Interframe Space, or SIFS, is used for high-priority frame exchanges that are part of an ongoing 802.11 transaction, such as acknowledgments and certain response frames. Because SIFS is shorter than contention-based waiting intervals, these immediate responses can occur before other stations begin competing for the channel. This improves the efficiency and reliability of frame exchanges. DHCP intervals, beacon intervals, and TCP timers are unrelated to this MAC-layer priority mechanism. Understanding interframe spaces helps explain why not all frames contend equally for the wireless medium.

Question 134.

Which Wi-Fi quality-of-service access category is normally given the highest contention priority?

1. Background
   2. Voice
   3. Best effort
   4. Bulk data

Correct Answer: 2. Voice

Explanation:

The WMM Voice access category generally receives the most favorable contention parameters because voice traffic is highly sensitive to delay and jitter. Video also receives preferential treatment, while best-effort and background traffic use less aggressive contention settings. WMM does not guarantee a fixed amount of bandwidth; it changes how traffic categories compete for medium access. Good voice performance also depends on low channel utilization, appropriate coverage, reliable roaming, and end-to-end QoS treatment. Prioritizing voice traffic cannot compensate for an RF environment that is severely congested or poorly designed.

Question 135.

Which WMM access category generally receives the lowest medium-access priority?

1. Voice
   2. Video
   3. Background
   4. Best effort

Correct Answer: 3. Background

Explanation:

The Background access category generally receives the least favorable contention parameters in WMM. It is intended for traffic that is relatively tolerant of delay, such as background synchronization or non-urgent bulk transfers. Voice and video receive higher priority because they are more sensitive to latency and jitter, while best effort occupies an intermediate position. WMM prioritization affects contention behavior but does not provide absolute guarantees. Proper WLAN capacity, low interference, adequate SNR, and correct end-to-end QoS configuration are still necessary for predictable application performance.

Question 136.

Which statement best describes why very low basic data rates can increase WLAN overhead?

1. They increase antenna gain
   2. They reduce encryption strength
   3. They disable MIMO
   4. Management and broadcast traffic transmitted at low rates consumes more airtime**

Correct Answer: 4. Management and broadcast traffic transmitted at low rates consumes more airtime

Explanation:

Low PHY rates require more transmission time to send the same amount of information. If management, multicast, or broadcast frames are transmitted at very low basic rates, they can consume disproportionate airtime. This overhead becomes especially noticeable in environments with many APs and SSIDs because periodic beacon traffic is repeated continuously. Carefully raising basic rates can improve airtime efficiency and help shrink cell boundaries, but the change must be validated against client compatibility and coverage requirements. Low data rates do not directly change antenna gain, encryption strength, or MIMO capability.

Question 137.

Which design problem may result when every access point is configured to transmit at maximum power?

1. Excessive cell overlap and co-channel contention
   2. All clients lose encryption support
   3. DHCP stops functioning
   4. The APs stop sending beacons

Correct Answer: 1. Excessive cell overlap and co-channel contention

Explanation:

Maximum AP transmit power can create oversized coverage cells that overlap extensively with neighboring same-channel cells. Because Wi-Fi uses a shared medium, devices that can hear one another may defer and contend for airtime, reducing aggregate capacity. High AP power can also create asymmetric links because client devices often transmit at lower power. Proper WLAN design balances coverage, capacity, client capabilities, and channel reuse rather than maximizing transmit power everywhere. Encryption, DHCP, and beacon transmission are not inherently disabled by high transmit power.

Question 138.

Which design principle helps reduce asymmetric links between access points and low-powered mobile clients?

1. Always maximize AP transmit power
   2. Configure AP power with client transmit capabilities in mind
   3. Disable acknowledgments
   4. Use as many SSIDs as possible

Correct Answer: 2. Configure AP power with client transmit capabilities in mind

Explanation:

A balanced WLAN should consider the transmit capabilities of actual client devices. If an AP transmits much more strongly than a mobile client, the client may hear the AP at a distance where its own transmissions cannot reliably reach the AP. This creates an asymmetric link and can lead to retries, poor throughput, or delayed roaming. Matching infrastructure power more closely to client capability helps create more realistic coverage boundaries and predictable roaming behavior. Disabling acknowledgments would harm reliability, while excessive SSIDs increase overhead rather than improving link balance.

Question 139.

Which survey method is most appropriate when a WLAN has already been deployed and must be tested against design requirements?

1. Post-deployment validation survey
   2. Predictive survey only
   3. Blueprint review only
   4. Inventory count only

Correct Answer: 1. Post-deployment validation survey

Explanation:

A post-deployment validation survey measures the actual installed WLAN and compares real performance against the original design requirements. Depending on the use case, validation may include RSSI, SNR, channel utilization, roaming, retries, throughput, application performance, and interference. Predictive surveys are useful before deployment but rely on assumptions about building materials and RF behavior. Blueprint reviews and inventory counts cannot prove that the wireless environment meets coverage or capacity goals. Validation provides evidence that the completed installation performs as intended with representative client devices and applications.

Question 140.

A user reports that Wi-Fi disconnects whenever moving between two parts of an office. Which combination should be investigated first?

1. DNS suffix and printer configuration
   2. Ethernet cable color and AP model name
   3. DHCP lease duration only
   4. Cell overlap, roaming thresholds, candidate AP visibility, authentication delay, and client roaming behavior**

Correct Answer: 4. Cell overlap, roaming thresholds, candidate AP visibility, authentication delay, and client roaming behavior

Explanation:

A problem that consistently occurs while moving between coverage areas strongly suggests a roaming issue. The investigation should examine whether sufficient overlap exists between neighboring cells, whether candidate APs are visible before the current connection deteriorates, how the client makes roaming decisions, and whether authentication or reassociation introduces excessive delay. Features such as 802.11k, 802.11r, and 802.11v may also be relevant if supported by the infrastructure and client. DHCP can matter in some network designs, but it should not automatically be assumed to be the cause. Roaming analysis should use representative clients, protocol captures, RF measurements, and infrastructure logs.