View Full CWNP CWNA-109 Exam Dumps and Practice Test Dumps

 

Question 181.

Which design requirement should be defined first when planning a WLAN for a hospital that must support voice, medical devices, and high-density user access?

1. Business and application requirements
   2. AP mounting bracket color
   3. Switch hostname format
   4. Maximum SSID count supported by the controller

Correct Answer: 1. Business and application requirements

Explanation:

A WLAN design should begin with business, application, client, security, coverage, capacity, and operational requirements. A hospital may have voice handsets, medical devices, staff laptops, guest users, and location-sensitive applications, each with different needs. Those requirements determine acceptable RSSI, SNR, latency, roaming behavior, security, redundancy, and capacity. Hardware selection should follow the requirements rather than drive them. Cosmetic details such as bracket color or hostname format do not determine wireless performance. Starting with clearly documented requirements also makes post-deployment validation more meaningful because the installed network can be tested against measurable objectives instead of vague expectations.

Question 182.

Which WLAN design goal is most important when many users occupy a lecture hall but each user already receives strong signal coverage?

1. Increasing RSSI further
   2. Capacity
   3. Hiding the SSID
   4. Extending DHCP lease duration

Correct Answer: 2. Capacity

Explanation:

When signal coverage is already sufficient but many users share the same area, capacity becomes the dominant design concern. WLAN capacity depends heavily on available airtime, channel reuse, client density, application demand, data rates, and interference. Increasing signal strength alone does not create more airtime and may even enlarge contention domains. Hiding an SSID does not improve capacity, and DHCP lease duration is unrelated to radio resource availability. High-density environments should be designed around aggregate demand, not just coverage. Validation should also simulate or measure realistic client load because an empty lecture hall can appear excellent even if the WLAN later becomes congested during actual use.

Question 183.

Which design technique can reduce co-channel contention when several nearby APs are operating in a dense environment?

1. Configure every AP to maximum transmit power
   2. Put all APs on the same channel
   3. Optimize channel reuse and cell size
   4. Advertise additional SSIDs

Correct Answer: 3. Optimize channel reuse and cell size

Explanation:

Efficient channel reuse and appropriately sized cells are fundamental to dense WLAN design. If neighboring APs use the same channel and can hear one another strongly, their clients share the same contention domain and must compete for airtime. Reducing unnecessary cell overlap, selecting suitable channels, and balancing transmit power can improve reuse. Maximum transmit power often makes co-channel contention worse by increasing the area over which APs and clients defer to one another. Additional SSIDs create more management overhead rather than additional capacity. Dense WLANs require deliberate RF planning rather than simply increasing AP count or transmit power.

Question 184.

Which channel-width strategy is generally most appropriate when the primary goal is maximizing channel reuse in a very dense WLAN?

1. 160 MHz on every AP
   2. 80 MHz on every AP
   3. The widest width each client supports
   4. Narrower channels such as 20 MHz**

Correct Answer: 4. Narrower channels such as 20 MHz

Explanation:

Narrower channels consume less spectrum and allow more independent channels to be reused across nearby APs. This is often advantageous in dense enterprise networks where aggregate capacity matters more than the peak PHY rate of a single client. Very wide channels can provide impressive individual link rates but consume large portions of the available spectrum, forcing more APs to reuse the same channels. This can increase contention and reduce total system performance. The correct width depends on available spectrum, client density, application needs, and regulatory constraints, but maximum width should never be treated as the automatic default.

Question 185.

Which measurement should be examined when determining whether poor WLAN performance is caused by excessive competition for airtime rather than weak signal coverage?

1. Channel utilization
   2. SSID character count
   3. DHCP lease length
   4. AP serial number

Correct Answer: 1. Channel utilization

Explanation:

Channel utilization indicates how much of the time the RF channel is considered busy. A client can have strong RSSI and good SNR yet still experience poor throughput or high latency if the channel is heavily occupied. High utilization can result from nearby Wi-Fi devices, retransmissions, management traffic, or non-Wi-Fi RF energy. SSID length, DHCP lease duration, and hardware serial numbers do not measure airtime competition. Channel utilization should be interpreted together with retry rates, client count, PHY rates, interference, and channel reuse to identify whether congestion rather than coverage is responsible for the observed performance.

Question 186.

Which behavior is most likely when a WLAN channel experiences a large number of active contending stations?

1. Each station receives dedicated full-duplex airtime
   2. Average wait time for medium access increases
   3. Noise floor automatically drops
   4. Clients stop using CSMA/CA

Correct Answer: 2. Average wait time for medium access increases

Explanation:

Wi-Fi is a shared medium, so more active contending stations generally mean more competition for transmission opportunities. Stations may experience longer backoff periods, more waiting, and potentially more collisions or retries. This increases latency and reduces the amount of airtime available to each individual device. Adding clients does not create dedicated full-duplex capacity, nor does it disable CSMA/CA. The noise floor is a separate RF measurement. This is why the number of associated clients alone is not always the best capacity metric; the number of active clients and their airtime demand are more directly relevant to performance.

Question 187.

Which traffic type normally benefits most from low latency and low jitter in a WLAN?

1. Background file synchronization
   2. Software updates
   3. Voice
   4. Bulk backups

Correct Answer: 3. Voice

Explanation:

Voice is highly sensitive to latency, jitter, packet loss, and roaming interruptions because the traffic is consumed in real time. A delayed voice packet may no longer be useful when it arrives. Background synchronization and bulk transfers are usually more tolerant of delay because TCP and applications can buffer or retry data. WLANs carrying voice therefore require good RF coverage, manageable channel utilization, reliable roaming, suitable QoS, and careful validation with representative handsets. Strong signal alone does not guarantee acceptable voice quality if the channel is congested or roaming delays are excessive.

Question 188.

Which WMM access category is generally intended for video traffic?

1. AC_BK
   2. AC_BE
   3. AC_VO
   4. AC_VI**

Correct Answer: 4. AC_VI

Explanation:

WMM defines four main access categories: voice, video, best effort, and background. AC_VI is intended for video traffic and receives more favorable contention parameters than best-effort or background traffic, though voice generally receives the highest priority. WMM influences how traffic competes for airtime but does not create guaranteed bandwidth. A congested WLAN can still produce poor video performance even when QoS classification is correct. End-to-end QoS should also be coordinated with the wired network so prioritization is preserved beyond the wireless medium.

Question 189.

Which WMM access category is intended for normal unprioritized application traffic?

1. AC_BE
   2. AC_VO
   3. AC_VI
   4. AC_BK only

Correct Answer: 1. AC_BE

Explanation:

AC_BE represents the Best Effort access category and is intended for ordinary traffic without special latency requirements. Voice and video typically receive more favorable contention behavior, while background traffic receives lower priority. Best effort is commonly used for general web browsing, many application flows, and other normal data traffic. WMM does not eliminate medium contention; it adjusts the contention parameters applied to different categories. Proper QoS requires correct classification, sufficient capacity, and a healthy RF environment. Prioritization cannot compensate for severe interference or a channel that is already saturated.

Question 190.

Which access category is designed for delay-tolerant background traffic?

1. AC_VO
   2. AC_BK
   3. AC_VI
   4. AC_BE

Correct Answer: 2. AC_BK

Explanation:

AC_BK is the WMM Background category and is intended for traffic that can tolerate longer delays. Examples may include background synchronization, non-urgent downloads, and some maintenance traffic. It generally receives less favorable contention parameters than voice, video, or best effort. This allows time-sensitive traffic to compete more effectively for medium access. However, WMM prioritization should not be interpreted as strict scheduling or guaranteed bandwidth. All categories still operate within a shared wireless medium, and overall performance depends on channel utilization, client load, RF conditions, and correct traffic classification.

Question 191.

Which roaming enhancement can help a client learn about neighboring BSSs before it needs to roam?

1. WPA2
   2. DFS
   3. 802.11k
   4. A-MPDU

Correct Answer: 3. 802.11k

Explanation:

802.11k provides radio resource measurement capabilities, including information that can help clients learn about neighboring BSSs. This can reduce the amount of time a client spends scanning all possible channels when it needs to roam. WPA2 is a security technology, DFS handles radar-sensitive spectrum, and A-MPDU is a frame-aggregation method. 802.11k does not force a client to roam, but it can make the roaming process more efficient by giving compatible clients useful information about potential candidates. Actual behavior still depends on the client implementation and roaming algorithm.

Question 192.

Which roaming enhancement is intended to reduce authentication delay when a client moves between BSSs?

1. 802.11e
   2. 802.11h
   3. 802.11d
   4. 802.11r**

Correct Answer: 4. 802.11r

Explanation:

802.11r introduced Fast BSS Transition to reduce the authentication-related delay that can occur when a client roams between access points. This can be especially valuable for voice and other latency-sensitive applications. 802.11e introduced QoS-related enhancements, 802.11h addressed spectrum management, and 802.11d provided regulatory-domain information. Fast transition features should be validated with representative clients because support and behavior vary. WLAN infrastructure may be configured correctly while some endpoints still handle roaming poorly, so end-to-end testing remains important.

Question 193.

Which amendment includes BSS Transition Management, which can allow infrastructure to recommend another AP to a client?

1. 802.11v
   2. 802.11a
   3. 802.11b
   4. 802.11g

Correct Answer: 1. 802.11v

Explanation:

802.11v includes wireless network management functions such as BSS Transition Management. With this capability, infrastructure can provide a client with information or recommendations about alternate BSSs. The client still makes the final roaming decision. 802.11v is often used alongside 802.11k and 802.11r in enterprise WLANs to improve roaming efficiency. Older PHY amendments such as 802.11a, 802.11b, and 802.11g do not provide this specific function. Infrastructure assistance can improve roaming, but client behavior remains a major factor in real-world performance.

Question 194.

Which security mechanism provides individual enterprise WLAN authentication through a supplicant, authenticator, and authentication server?

1. Static WEP
   2. 802.1X/EAP
   3. MAC filtering only
   4. Open authentication only

Correct Answer: 2. 802.1X/EAP

Explanation:

802.1X/EAP supports centralized enterprise authentication using a supplicant on the client, an authenticator in the WLAN infrastructure, and an authentication server such as RADIUS. This architecture allows organizations to use individualized credentials or certificates and apply centralized access policies. Static WEP is obsolete, MAC filtering is easily bypassed, and open authentication does not provide equivalent identity verification. Enterprise WLAN deployments should also validate server certificates, select appropriate EAP methods, manage credentials securely, and ensure redundancy for authentication services. Failure at any part of the authentication chain can prevent otherwise healthy clients from connecting.

Question 195.

Which device or component commonly acts as the supplicant in an 802.1X WLAN?

1. The wireless client
   2. The RADIUS server
   3. The Ethernet switch uplink only
   4. The DNS server

Correct Answer: 1. The wireless client

Explanation:

The supplicant is the device or software seeking authenticated network access, typically the wireless client. The access point or WLAN infrastructure acts as the authenticator, while a RADIUS server commonly serves as the authentication server. The supplicant participates in EAP exchanges and supplies the credentials or certificate information required by the selected authentication method. DNS is unrelated to the 802.1X authentication role. Understanding the supplicant, authenticator, and authentication-server relationship is fundamental when troubleshooting enterprise WLAN access because failures can occur at any one of these components.

Question 196.

Which device commonly acts as the authentication server in an enterprise WLAN using 802.1X?

1. Client laptop
   2. Access point antenna
   3. DHCP relay
   4. RADIUS server**

Correct Answer: 4. RADIUS server

Explanation:

A RADIUS server commonly performs the authentication-server role in an 802.1X enterprise WLAN. It receives authentication requests from the WLAN authenticator and evaluates user or device credentials according to the configured EAP method and identity infrastructure. The client is the supplicant, while the AP or controller commonly acts as the authenticator. DHCP is used for IP configuration after network access is established and does not normally perform the authentication-server role. RADIUS logs are particularly useful when troubleshooting failed enterprise Wi-Fi authentication because they can reveal certificate, credential, policy, or identity-store problems.

Question 197.

Which security feature most directly reduces the risk of spoofed deauthentication attacks against supported clients?

1. Protected Management Frames
   2. Hidden SSID
   3. Longer DHCP leases
   4. Lower transmit power only

Correct Answer: 1. Protected Management Frames

Explanation:

Protected Management Frames, or PMF, provide cryptographic protection for selected robust management frames, including important deauthentication and disassociation exchanges. This helps prevent attackers from trivially forging certain management frames to disconnect clients. Hiding an SSID does not provide meaningful cryptographic protection, and DHCP timing is unrelated. Transmit power may influence RF coverage but does not authenticate management frames. PMF has become increasingly important in modern Wi-Fi security and is mandatory in certain newer security modes. Client compatibility should be considered before enforcing PMF in mixed-device environments.

Question 198.

Which security configuration practice is most important for protecting enterprise EAP credentials from rogue authentication servers?

1. Disable certificate validation
   2. Validate the trusted RADIUS server certificate and CA
   3. Use the shortest possible passwords
   4. Hide the SSID

Correct Answer: 2. Validate the trusted RADIUS server certificate and CA

Explanation:

Proper server-certificate validation helps clients verify that they are communicating with the legitimate enterprise authentication infrastructure. Without validation, a rogue access point and authentication server may be able to present a fraudulent certificate and attempt to capture credentials. Clients should trust only the appropriate certificate authorities and verify expected server identities. Hiding the SSID does not prevent impersonation, while disabling certificate validation significantly weakens security. Certificate deployment should be centrally managed where possible so users are not asked to manually accept unknown certificates during connection attempts.

Question 199.

Which validation technique is most appropriate for verifying whether a deployed WLAN meets voice roaming requirements?

1. Test with representative voice clients while moving through expected roam paths
   2. Measure only one RSSI value beside each AP
   3. Check only the wired switch model
   4. Review the predictive heatmap without on-site testing

Correct Answer: 1. Test with representative voice clients while moving through expected roam paths

Explanation:

Voice roaming should be validated using the actual or representative voice devices that will operate on the WLAN. Testing should follow expected movement paths while observing signal conditions, candidate AP visibility, roaming delay, packet loss, latency, and application continuity. Different client models can use different roaming algorithms and thresholds, so results from one survey adapter may not represent the production device population. Predictive heatmaps are useful design tools but cannot substitute for post-deployment testing. Real movement and real application traffic provide the strongest evidence that the deployed WLAN satisfies voice requirements.

Question 200.

A WLAN has strong RSSI, good SNR, and successful authentication, but users experience severe slowdowns only at lunchtime when a cafeteria fills with hundreds of devices. What should be investigated first?

1. SSID spelling
   2. Whether all AP LEDs are the same color
   3. DHCP hostname format
   4. Airtime capacity, client density, channel utilization, contention, and channel reuse**

Correct Answer: 4. Airtime capacity, client density, channel utilization, contention, and channel reuse

Explanation:

The time-specific slowdown strongly suggests a capacity problem rather than a basic coverage or authentication failure. Hundreds of active devices can consume available airtime quickly, especially if multiple neighboring cells reuse the same channel or clients operate at inefficient rates. The investigation should focus on channel utilization, active-client count, application demand, retries, channel widths, co-channel contention, band distribution, and available spectrum. Strong RSSI and good SNR confirm that clients can hear the network, but they do not indicate whether sufficient airtime remains. Dense WLAN performance depends on efficient spectrum use and capacity planning, not signal strength alone.