You are implementing a multi-AP WLAN and fast secure roaming is essential. Which one of the following methods is an IEEE 802.11 standard method for fast roaming?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationReference https://www.networkcomputing.com/wireless-infrastructure/wifi-fast-roaming-simplified/1993108957
You are troubleshooting a controller-based AP that is unable to locate the controller. DHCP is not used and the controller is located at 10.10.10.81/24 while the AP is on the 10.10.16.0/24 network. What should be inspected to verify proper configuration?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
You administer a WLAN that offers a guest SSID of GUESTNWORK. User connect to the GUESTNWORK SSID, but report that they cannot browse the internet. The devices simply report no internet connection. What common problem causes this scenario?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
What common feature of MDM solutions can be used to protect enterprise data on mobile devices?
-
A
Over-the-air registration
-
B
-
C
-
D
Reveal answer details
Close answer details
To ease user complexity, your company has implemented a single SSID for all employees. However, the network administrator needs a way to control the network resources that can be accessed by each employee based in their department. What WLAN feature would allow the network administrator to accomplish this task?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
What security solution is required to be used in place of Open System Authentication for all open network 802.11 implementations in the 6 GHz band?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
When a STA has authenticated to an AP (AP-1), but still maintains a connection with another AP (AP-2), what is the state of the STA on AP-1?
-
A
-
B
Unauthenticated and Unassociated
-
C
Authenticated and Unassociated
-
D
Authenticated and Associated
Reveal answer details
Close answer details
Correct answerA
Explanationhttps://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/Chapter-11.pdf
In an 802.11 2.4 GHz system, what 22 MHz channels are considered non-overlapping?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
What is the most effective method for testing roaming in relation to 802.11 VoIP handsets?
-
A
Use a spectrum analyzer to monitor RF activity during a VoIP call.
-
B
Use a protocol analyzer to capture the traffic generated when a laptop roams.
-
C
Place a call with the handset and move around the facility to test quality during roaming.
-
D
Use the built-in roaming monitor built into all VoIP handsets.
Reveal answer details
Close answer details
Question 10
Single choice
What terms accurately complete the following sentence? The IEEE 802.11-2016 standard specifies mandatory support of the _______________ cipher suite for Robust Security Network Associations, and optional use of the ________________ cipher suite, which is designed for use with pre-RSNA hardware and is deprecated.
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 11
Single choice
What is required when operating 802.11ax APS in the 6 GHz band using passphrase-based authentication?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationExplanation: SAE (Simultaneous Authentication of Equals) is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication. SAE is a secure and robust authentication method that is defined in the IEEE 802.11s amendment and is also known as WPA3-Personal or WPA3-SAE. SAE is based on a cryptographic technique called Dragonfly Key Exchange, which allows two parties to establish a shared secret key using a passphrase, without revealing the passphrase or the key to an eavesdropper or an attacker. SAE also provides forward secrecy, which means that if the passphrase or the key is compromised in the future, it does not affect the security of past communications. SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because of the new regulations and standards that apply to this band. The 6 GHz band is a new frequency band that was opened for unlicensed use by the FCC and other regulatory bodies in 2020. The 6 GHz band offers more spectrum and less interference than the existing 2.4 GHz and 5 GHz bands, which can enable higher performance and efficiency for Wi-Fi devices. However, the 6 GHz band also has some restrictions and requirements that are different from the other bands, such as: The 6 GHz band is divided into two sub-bands: U-NII-5 (5925-6425 MHz) and U- NII-7 (6525-6875 MHz). The U-NII-5 sub-band is subject to DFS (Dynamic Frequency Selection) rules, which require Wi-Fi devices to monitor and avoid using channels that are occupied by radar systems or other primary users. The U- NII-7 sub-band is not subject to DFS rules, but it has a lower maximum transmit power limit than the U-NII- 5 sub-band. The Wi-Fi devices that operate in the 6 GHz band are called 6E devices, which stands for Extended Spectrum. 6E devices must support 802.11ax technology, which is also known as Wi-Fi 6 or High Efficiency (HE). 802.11ax is a new standard that improves the performance and efficiency of Wi-Fi networks by using features such as OFDMA (Orthogonal Frequency Division Multiple Access), MU-MIMO (Multi-User Multiple Input Multiple Output), BSS Coloring, TWT (Target Wake Time), and HE PHY and MAC enhancements. The 6E devices that operate in the 6 GHz band must also support WPA3 security, which is a new security protocol that replaces WPA2 and provides stronger encryption and authentication for Wi-Fi networks. WPA3 has two modes: WPA3- Personal and WPA3-Enterprise. WPA3-Personal uses SAE as its authentication method, which requires a passphrase to establish a secure connection between two devices. WPA3-Enterprise uses EAP (Extensible Authentication Protocol) as its authentication method, which requires a certificate or a credential to authenticate with a server. Therefore, SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because it is part of WPA3-Personal security, which is mandatory for 6E devices in this band. References: , Chapter 3, page 120 , Section 3.2 9of30
Question 12
Single choice
You are attempting to explain RF shadow and how it can cause lack of coverage. What common building item frequently causes RF shadow and must be accounted for in coverage plans?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 13
Single choice
What can an impedance mismatch in the RF cables and connectors cause?
-
A
Fewer MCS values in the MCS table
-
B
-
C
Increased amplitude of the RF signal
-
D
Increased range of the RF signal
Reveal answer details
Close answer details
Correct answerB
ExplanationReferences: https://books.google.com.pk/books?id=uA68E68OqQgC&pg=PA235&lpg=PA235&dq=impedance+mismatch+in+the+RF+cables+and+connectors+cause&source=bl&ots=WEynkTBqO1&sig=-Hm_d26REw_UrVZtz20xErL-4Rg&hl=en&sa=X&ved=0ahUKEwj5rvW0j57ZAhVMzqQKHeCGB0kQ6AEISDAF#v=onepage&q=impedance%20mismatch%20in%20the%20RF%20cables%20and%20connectors%20cause&f=false
Question 14
Single choice
A POE device requires 47 W of power. What POE specification should be used?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationA POE device that requires 47 W of power should use the 802.3bt specification. This is because 802.3bt is the latest POE standard that supports up to 90 W of power delivery over four pairs of wires in an Ethernet cable. The previous POE standards, such as 802.3af and 802.3at, only support up to 15.4 W and 30 W of power delivery over two pairs of wires in an Ethernet cable, respectively. Therefore, they are not sufficient for powering a device that requires 47 W of power. The 802.11at specification does not exist; it is a typo or confusion with the 802.3at specification. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2431
Question 15
Single choice
A client complains of low data rates on his computer. When you evaluate the situation, you see that the signal strength is -84 dBm and the noise floor is -96 dBm. The client is an 802.11ac client and connects to an 802.11ac AP. Both the client and AP are 2x2:2 devices. What is the likely cause of the low data rate issue?
-
A
-
B
CAT5e cabling run to the AP
-
C
-
D
Lack of support for 802.11n
Reveal answer details
Close answer details
Question 16
Single choice
What statement about 802.3, Clause 33 Power over Ethernet is true?
-
A
When using CAT5 cabling, you increase the maximum draw available to the PD over that available with CAT6.
-
B
Only endpoint PSEs are supported.
-
C
Only midspan PSEs are supported.
-
D
The lowest voltage drop is achieved when using CAT6 cable instead of Cat5 or CAT5e.
Reveal answer details
Close answer details
Question 17
Single choice
You must plan for POE in an office environment. Which one of these devices is least likely to be a POE PSE?
-
A
Midspan multi-port injector
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationA VoIP phone is least likely to be a POE PSE of the devices listed. POE stands for Power over Ethernet, which is a technology that allows devices to receive both power and data over a single Ethernet cable. A POE PSE stands for Power Sourcing Equipment, which is a device that provides power to other devices over Ethernet. A POE PD stands for Powered Device, which is a device that receives power from a PSE over Ethernet. A midspan multi-port injector, a switch, and a midspan injector are examples of POE PSEs, as they can supply power to multiple devices over Ethernet cables. A VoIP phone is an example of a POE PD, as it can receive power from a PSE over an Ethernet cable. However, some VoIP phones can also act as POE PSEs for other devices, such as IP cameras or wireless access points, but this is not very common. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2411
Question 18
Single choice
You are attempting to explain RF shadow and how it can cause lack of coverage. What common building item frequently causes RF shadow and must be accounted for in coverage plans?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 19
Single choice
You are troubleshooting a problem with a new 802.11ax AP. While the AP supports four spatial streams, most clients are only achieving maximum data rates of 150 Mbps. What is the likely cause?
-
A
The clients are 802.11n devices
-
B
The clients are only two stream 802.11ax clients
-
C
Contention caused by an overlapping BSS
-
D
Non-Wi-Fi interference in the channel
Reveal answer details
Close answer details
Correct answerA
ExplanationThe clients are 802.11n devices. 802.11n devices can only support a maximum of four spatial streams, and the maximum data rate for a single spatial stream is 150 Mbps. Therefore, if most clients are only achieving 150 Mbps, it means they are using only one spatial stream, which is typical for 802.11n devices. To achieve higher data rates, the clients would need to support more spatial streams, which is possible with 802.11ax devices 12. The other options are not correct because they do not explain why most clients are only achieving 150 Mbps. Option B is incorrect because two stream 802.11ax clients can achieve data rates of up to 574 Mbps in a 20 MHz channel 1. Option C is incorrect because contention caused by an overlapping BSS would affect all clients, not just most of them, and it would also reduce the throughput, not the data rate. Option D is incorrect because non-Wi-Fi interference in the channel would also affect all clients, not just most of them, and it would also cause errors and retransmissions, not lower data rates. References: 1: CWNA-108 Official Study Guide, page 144 2: 802.11ax data rates
Question 20
Single choice
What is an advantage of using WPA2-Personal instead of WEP-128 as a security solution for 802.11 networks?
-
A
WPA2-Personal uses CCMP for encryption, and WEP-128 uses TKIP for encryption
-
B
WPA2-Personal uses dynamic encryption keys, and WEP-128 uses static keys
-
C
WPA2-Personal uses 802.1X/EAP for authentication, and WEP-128 uses preshared keys
-
D
WPA2-Personal is based on IEEE 802.11 industry standards, but WEP is not
Reveal answer details
Close answer details
Question 21
Single choice
In WLAN security, what authentication method always creates Layer 2 dynamic encryption keys?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationReference https://books.google.com.pk/books?id=0ZWLn57EdpsC&pg=PA142&lpg=PA142&dq=WLAN+security, +what+authentication+method+always+creates+Layer+2+dynamic+encryption +keys&source=bl&ots=CBgudPbaRh&sig=s7kLv2NeFqfjoBK6A_X- 9T2Nc0k&hl=en&sa=X&ved=0ahUKEwithMDooazZAhXMCuwKHfSNC- kQ6AEIWTAH#v=onepage&q=WLAN%20security%2C%20what%20authentication%20method% 20always%20creates%20Layer%202%20dynamic%20encryption%20keys&f=false
Question 22
Single choice
You support a WLAN using dual-band 802.11ac three stream access points. All access points have both the 2.4 GHz and 5 GHz radios enabled and use 40 MHz channels in 5 GHz and 20 MHz channels in 2.4 GHz. A manager is concerned about the fact that each access point is connected using a 1 Gbps Ethernet link. He is concerned that the Ethernet link will not be able to handle the load from the wireless radios. What do you tell him?
-
A
His concern is valid and the company should upgrade all Ethernet links to 10 Gbps immediately.
-
B
His concern is valid and the company should immediately plan to run a second 1 Gbps Ethernet link to each AP.
-
C
His concern is invalid because the AP will compress all data before transmitting it onto the Ethernet link.
-
D
Due to 802.11 network operations and the dynamic rates used by devices on the network, the two radios will likely not exceed the 1 Gpbs Ethernet link.
Reveal answer details
Close answer details
Question 23
Single choice
Which one of the following is not a factor considered when calculating the Link Budget for an outdoor point-to-point WLAN bridge link?
-
A
MU-MIMO capabilities of the bridges
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 24
Single choice
What primary metric of scanning can stations use to select the best AP for connectivity to the desired BSS?
-
A
Signal strength of AP beacons received.
-
B
PING latency when testing against an Internet server.
-
C
FCS errors in frames transmitted to and from the AP.
-
D
Throughput speed in Mbps.
Reveal answer details
Close answer details
Question 25
Single choice
You are troubleshooting a WLAN problem and you suspect hidden node as the cause. What should you look for in a protocol analyzers?
-
A
Frames with the HN bit set to 1
-
B
Frames with the retry bit set to 0
-
C
Frames transmitted from the AP without acknowledgement
-
D
Retransmitted frames from multiple STAs at higher rates than other STAs
Reveal answer details
Close answer details
Correct answerD
ExplanationReference http://setup-wireless.blogspot.com/2008/11/wireless-hidden-node.html
Question 26
Single choice
What standard is referenced in the 802.11-2016 specification and is recommended for robust WLAN client security?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 27
Single choice
Three access points are used within a facility. One access point is on channel 11 and the other two are on channel 1. The two access points using channel 1 are on either side of the access point using channel 11 and sufficiently apart so that they do not interfere each other when they transmit frames. Assuming no other Aps are in the vicinity, is CCI still a possibility in this network and why?
-
A
Yes, because the client devices connected to one of the channel 1 APs will transmit frames that reach the other channel 1 AP as well as
-
B
No, because the Aps are far enough apart that no CCI will occur
-
C
No, because CCI only occurs in the 5 GHz frequency band
-
D
Yes, because channel 11 loops around and causes CCI with channel 1
Reveal answer details
Close answer details
Question 28
Single choice
What non-standard WLAN solution attempts to give a longer transmission windows to devices with higher data rates then devise with lower data rates?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
|