CWNP CWAP-405 Questions and Answers Guarantee you Oass the Test Easily [Q55-Q71]

NEW QUESTION 55
You are performing a multiple adapter channel aggregation capture to troubleshoot a VoIP roaming problem and would like to measure the roaming time from the last VoIP packet sent on the old AP’s channel to the first VoIP packet sent on the new AP’s channel. Which timing column in the packet view would measure this for you?

Roaming

Relative

Absolute

Delta

NEW QUESTION 56
You have been recently hired as the wireless network administrator for an organization spread across seven locations. They have deployed more than 100 APs, but they have not been managed in either an automated or manual process for more than 18 months.
Given this length of time, what is one of the first things you should evaluate from a support perspective?

The data rates allowed

The VLANs in use

The channels in use

The firmware revision

NEW QUESTION 57
You are troubleshooting a connection problem with a client STA. Regardless of the AP to which it attempts to connect, the connection fails. Using a wired protocol analyzer, you determine that the problem is with the
802.1X/EAP authentication to the RADIUS server.
What layer or range of layers of the OSI model revealed this information?

Layer 3

Layer 2

Below Layer 3

Above Layer 4

NEW QUESTION 58
Finish the statement:
It is possible to distinguish between_______22 MHz transmissions and________20 MHz transmissions when looking at an FFT plot.

HR/DSSS and ERP

OFDM and HT

ERP and VHT

HT and VHT

NEW QUESTION 59
You have installed a new 802.1 lac WLAN configured with 80 MHz channels. Users in one area are complaining about poor performance. This area is currently served by a single AP. You take a spectrum analysis capture in the poor performing area. While examining the waterfall plot you notice the airtime utilization is higher on the first 20 MHz of the 80 MHz channel when compared to the rest of the channel.
What do you conclude?

The AP is misconfigured and needs to be reconfigured to 80 MHz operation

Non-Wi-Fi interference is preventing the APs 80 MHz operation

The first 20 MHz is the AP’s primary channel and higher airtime utilization on the primary channel is normal when an AP is configured for 80 MHz operation

RRM is enabled and has dynamically picked a 20 MHz channel

NEW QUESTION 60
ABC Company requires the ability to identify and quickly locate rogue devices. ABC has chosen an overlay WIPS solution with Wi-Fi sensors that use dipole antennas to perform this task. No other sensors are included. Use your knowledge of location tracking techniques to answer the question.
Which one of the following location methods is not available in the described system?

GPS Positioning

Time Difference of Arrival (TDoA)

RF Fingerprinting

Trilateration of RSSI measurements

NEW QUESTION 61
Which common feature of a Spectrum Analyzer would be the best to help you locate a non-802.11 interference source?

Max hold

Min hold

Location filter

Device finder

NEW QUESTION 62
As the WLAN administrator in your organization you are responsible for troubleshooting connection issues.
Several STAs are connecting to the network, but are unable to communicate after connection. You suspect a DHCP problem. After capturing traffic on the wired-side of the AP, you want to view only DHCP traffic.
What filter in Wireshark can be used for this purpose?

DHCPv6

DHCP

BOOTP

DHCPv4

NEW QUESTION 63
Which one of the following should be the first step when troubleshooting a WLAN issue?

Identify probable causes

Identify capture locations

Perform an initial WLAN scan and see if any obvious issues stand out

Define the problem

NEW QUESTION 64
You have received reports of performance problems in a BSS. One specific user is indicating that her downloads are taking a very long time compared to other users around her. You want to determine if the AP is sending frames multiple times to get through to the user’s computer.
Where should you monitor with the protocol analyzer to see retries from the AP in this scenario?

Directly in the middle of the AP and client STA

Very near the AP

Capture from another AP in another BSS

Very near the client STA

NEW QUESTION 65
When would you expect to see a Reassociation Request frame’

Every time a STA associates to an AP to which it has previously been associated

Only when a STA is using FT roaming

Only when a STA roams back to an AP it has previously been associated with

Every time a STA roams

NEW QUESTION 66
You must report on frame types seen on the WLAN. You want to list the frame types by both name and binary value.
What frame type is represented by the binary value 011010, which includes the Type and Subtype values?

Beacon

PS-Poll

Authentication

Association Request

NEW QUESTION 67
Recently, three rogue APs have been connected to the network and later discovered. You want to prevent future rogue AP installations as much as possible.
What is the first step to eliminating or reducing rogue APs on the network?

Use IPSec between every AP and the network infrastructure

Define a direct policy that stipulates the ramifications of installing unauthorized devices

Create a hash of the MAC addresses of all authorized devices and continually scan for non-matching hashes

Enable rogue detection in the existing authorized APs

NEW QUESTION 68
What is encrypted within the third message of the 4-Way Handshake?

PMK

PTK

GMK

GTK

The GTK (Group Temporal Key) is encrypted within the third message of the 4-Way Handshake. The 4-Way Handshake is a process that establishes a secure connection between a STA (station) and an AP (access point) using WPA2 (Wi-Fi Protected Access 2), which is a security protocol that uses AES-CCMP (Advanced Encryption Standard-Counter Mode CBC-MAC Protocol) as its encryption algorithm. The 4-Way Handshake consists of four messages that are exchanged between the STA and the AP. The first message is sent by the AP to the STA, containing the ANonce (Authenticator Nonce), which is a random number generated by the AP. The second message is sent by the STA to the AP, containing the SNonce (Supplicant Nonce), which is a random number generated by the STA, and the MIC (Message Integrity Code), which is a value that verifies the integrity of the message. The third message is sent by the AP to the STA, containing the GTK, which is a key that is used to encrypt and decrypt multicast and broadcast data frames, and the MIC. The GTK is encrypted with the KEK (Key Encryption Key), which is derived from the PTK (Pairwise Temporal Key).
The PTK is a key that is used to encrypt and decrypt unicast data frames, and it is derived from the PMK (Pairwise Master Key), the ANonce, and the SNonce. The fourth message is sent by the STA to the AP, containing only the MIC, to confirm the completion of the 4-Way Handshake. The other options are not correct, as they are not encrypted within the third message of the 4-Way Handshake. The PMK is a key that is derived from a passphrase or obtained from an authentication server, and it is not transmitted in any message of the 4-Way Handshake. The PTK is a key that is derived from the PMK, the ANonce, and the SNonce, and it is not transmitted in any message of the 4-Way Handshake. The GMK (Group Master Key) is a key that is generated by the AP and used to derive the GTK, and it is not transmitted in any message of the 4-Way Handshake. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 8: Security Analysis, page 211-213

NEW QUESTION 69
You view a protocol analyzer capture decode with the following protocol frames listed in the following order (excluding the ACK frames): 1) 802.11 Probe Request and 802.11 Probe Response 2) 802.11 Auth and another 802.11 Auth 2) 802.11 Assoc Req and 802.11 Assoc Rsp 4) EAPOL-Start 5) EAP Request and EAP Response 6) EAP Request and EAP Response 7) EAP Request and EAP Response 8) EAP Request and EAP Response 9) EAP Request and EAP Response 10) EAP Success 19) EAPOL-Key (4 frames in a row) What are you seeing in the capture file?

WPA2-Personal authentication

Wi-Fi Protected Setup with PIN

WPA2-Enterprise authentication

802.1X with Dynamic WEP

NEW QUESTION 70
You suspect an interfere may exist in a BSS that is experiencing sporadic problems. You want to identify and locate the device. The actual device identify is not known.
What tool should be used for this purpose?

Spectrum analyzer

Cable tester

Throughput tester

Protocol analyzer

NEW QUESTION 71
When configuring a long-term, forensic packet capture and saving all packets to disk which of the following is not a consideration?

Real-time packet decodes

Analyzer location

Total capture storage space

Individual trace file size

Related posts:

admin

You might also like

[Q203-Q224] 2025 Reliable Study Materials & Testing Engine for CWDP-305 Exam Success!

Leave a Reply Cancel reply