The Most In-Demand CWNP CWAP-405 Pass Guaranteed Quiz
New Version CWAP-405 Certificate & Helpful Exam Dumps is Online
NEW QUESTION # 43
What is the default 802.11 authentication method for a STA when using Pre-RSNA?
- A. Shared Key
- B. Open System
- C. 4-Way Handshake
- D. PSK
Answer: B
Explanation:
The default 802.11 authentication method for a STA when using Pre-RSNA is Open System. This is the simplest and most common authentication method, which does not provide any security or encryption. In Open System authentication, the STA sends an Authentication Request frame to the AP, and the AP responds with an Authentication Response frame with a status code of success. After this, the STA can proceed to association with the AP . References: CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 181; CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 183.
NEW QUESTION # 44
Which one of the following is an advantage of using display filters that is not an advantage of capture-time filters?
- A. They allow for focused analysis on just the packets of interest
- B. Once created they are reusable for later captures
- C. They only hide the packets from view and the filtered packets can be enabled for view later
- D. Multiple of them can be applied simultaneously
Answer: C
Explanation:
Display filters are applied after the capture is completed and they only hide the packets from view. The filtered packets are still present in the capture file and can be enabled for view later by changing or removing the display filter. This is an advantage over capture-time filters, which discard the packets that do not match the filter criteria and cannot be recovered later34 References:
* CWAP-403 Study Guide, Chapter 2: Protocol Analysis, page 37
* CWAP-403 Objectives, Section 2.3: Apply display filters
NEW QUESTION # 45
Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software. When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?
- A. Probe Response
- B. 4-Way Handshake
- C. Authentication
- D. Reassociation
Answer: B
Explanation:
The 4-way handshake is the process that establishes the pairwise transient key (PTK) between the client and the AP in WPA2-PSK. The PTK is derived from the PSK, the SSID, and some random numbers exchanged in the handshake frames. The PTK is used to encrypt and decrypt the data frames between the client and the AP. Therefore, in order to decrypt WPA2-PSK data packets, a protocol analyzer needs to capture the 4-way handshake frames and have the PSK and SSID configured in the analyzer software12 References:
* CWAP-405Study Guide, Chapter 3: 802.11 MAC Layer Frame Formats and Technologies, page 87
* CWAP-405Objectives, Section 3.5: Analyze security exchanges
NEW QUESTION # 46
Which one of the following is not a valid acknowledgement frame?
- A. Block Ack
- B. Ack
- C. CTS
- D. RTS
Answer: D
Explanation:
RTS is not a valid acknowledgement frame. RTS stands for Request To Send, and it is a control frame that is used to initiate an RTS/CTS exchange before sending a data frame. The purpose of an RTS/CTS exchange is to reserve the medium for a data transmission and avoid collisions with hidden nodes. An acknowledgement frame is a control frame that is used to confirm the successful reception of a data frame or a block of data frames. The valid acknowledgement frames are CTS (Clear To Send), Ack (Acknowledgement), and Block Ack (Block Acknowledgement) . References: CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 186; CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 187; CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 189; CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 190.
NEW QUESTION # 47
What is the function of 802.11 Management frames?
- A. Manage the flow of data
- B. Communicate configuration changes between WLAN controller and APs
- C. Manage the BSS
- D. Prioritize network administration traffic
Answer: C
Explanation:
The function of 802.11 management frames is to manage the BSS. A BSS (Basic Service Set) is a group of STAs (stations) that share a common SSID (Service Set Identifier) and communicate with each other through an AP (access point) or directly in an ad hoc mode. Management frames are one of the three types of 802.11 frames, along with control and data frames. Management frames are used to establish, maintain, and terminate associations between STAs and APs, as well as to advertise and discover BSSs, exchange security information, report errors, and perform other management functions. The other options are not correct, as they are not functions of 802.11 management frames. Prioritizing network administration traffic, communicating configuration changes between WLAN controller and APs, and managing the flow of data are functions of other types of frames or protocols. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 120-121
NEW QUESTION # 48
Given: The Frame Check Sequence (FCS) is a 32 CRC used for error detection.
The CRC is calculated over what?
- A. PHY Header, MAC Header and Frame Body
- B. PHY Header and Mac Header only
- C. Mac Header and Frame Body only
- D. Frame Body only
Answer: C
Explanation:
The CRC is calculated over the MAC Header and Frame Body only. The CRC (Cyclic Redundancy Check) is a 32-bit value that is used for error detection in wireless transmissions. The CRC is calculated over the MAC Header and Frame Body of a PSDU, which are the parts of the data unit that contain information such as source and destination addresses, frame type, frame control, sequence number, payload, etc. The CRC is appended to the end of the PSDU as a FCS (Frame Check Sequence) field. The CRC is not calculated over the PHY Header or PHY Preamble, which are parts of the PPDU that contain information such as modulation, coding, data rate, etc. The PHY Header and PHY Preamble are added or removed by the PHY layer during the conversion between PSDU and PPDU. References: [Wireless Analysis Professional Study Guide CWAP-
405], Chapter 4: 802.11 Physical Layer, page 97-98
NEW QUESTION # 49
You are troubleshooting problems with DHCP in relation to lightweight APs. They vendor class identifier (VCI) is not specified in the DHCP server. When you contact vendor support, they inform you that it is not necessary.
When is this information true?
- A. When the DHCP server is directly connected to the subnet
- B. When only one client option 60 value is required
- C. When only one client option 43 value is required
- D. When only one AP exists on the subnet
Answer: C
Explanation:
The DHCP server should be configured to provide the IP address information to the APs, but it may also be required to pass information for option 43. Option 43 is a vendor information option and can be used for any vendor purpose. The vendor class identifier (VCI) (for example, "Cisco AP c3600") is used with option 60 to determine the appropriate information to return with option 43.
NEW QUESTION # 50
A PHY Header is added to the PSDU at which layer?
- A. MAC
- B. LLC
- C. Network
- D. PHY
Answer: D
Explanation:
A PHY header is added to the PSDU at the PHY layer. A PHY header is a part of the PPDU that contains information such as modulation, coding, and data rate. The PHY header is added by the PHY layer when it converts a PSDU to a PPDU for transmission, or removed by the PHY layer when it converts a PPDU to a PSDU for reception. The other layers do not add or remove a PHY header. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 4: 802.11 Physical Layer, page 97-98
NEW QUESTION # 51
What is the function of the PHY layer?
- A. Convert PPDUs to PSDUs for transmissions and PSDUs to PPDUs for receptions
- B. Convert MSDUs to PPDUs for transmissions and PPDUs to MSDUs for receptions
- C. Convert PPDUs to MSDUs for transmissions and MSDUs to PPDUs for receptions
- D. Convert PSDUs to PPDUs for transmissions and PPDUs to PSDUs for receptions
Answer: D
Explanation:
The function of the PHY layer is to convert PSDUs to PPDUs for transmissions and PPDUs to PSDUs for receptions. A PSDU (PHY Service Data Unit) is the data unit that is passed from the MAC layer to the PHY layer for transmission, or from the PHY layer to the MAC layer for reception. A PPDU (PHY Protocol Data Unit) is the data unit that is transmitted or received over the wireless medium by the PHY layer. A PPDU consists of a PSDU and a PHY header, which contains information such as modulation, coding, and data rate.
The PHY layer adds or removes the PHY header to or from the PSDU during the conversion process. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 4: 802.11 Physical Layer, page 97-98
NEW QUESTION # 52
Given: Adjacent Channel Interference (ACI) can cause frame corruption and poor performance in WLANs.
You are using a protocol analyzer in the attempt to detect ACI.
What should you look for in such a scenario?
- A. Look for frames with a low signal strength value in the radio tap header
- B. Look at CRC errors
- C. Look at Retry counts
- D. Capture on the channel you think may be impacted by ACI and see if any frames are captured from adjacent channels
Answer: D
NEW QUESTION # 53
During a VHT Transmit Beamforming sounding exchange, the beamformee transmits a Compressed Beamforming frame to the beamformer. What is communicated within this Compressed Beamforming frame?
- A. Feedback Matrix
- B. Beamforming Matrix
- C. Steering Matrix
- D. Beamformee Matrix
Answer: A
Explanation:
The beamformee transmits a Feedback Matrix within the Compressed Beamforming frame to the beamformer.
The Feedback Matrix contains information about the channel state between the beamformee and each spatial stream of the beamformer. This information is used by the beamformer to adjust its transmit weights and optimize its signal for the beamformee34. References: CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 11: 802.11n/ac/ax PHYsical Layer Frame Exchanges, page 4033; CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 11: 802.11n/ac/ax PHYsical Layer Frame Exchanges, page 4064.
NEW QUESTION # 54
Recently, three rogue APs have been connected to the network and later discovered. You want to prevent future rogue AP installations as much as possible.
What is the first step to eliminating or reducing rogue APs on the network?
- A. Enable rogue detection in the existing authorized APs
- B. Define a direct policy that stipulates the ramifications of installing unauthorized devices
- C. Create a hash of the MAC addresses of all authorized devices and continually scan for non-matching hashes
- D. Use IPSec between every AP and the network infrastructure
Answer: A
NEW QUESTION # 55
You are concerned with management overhead in your WLAN. When evaluating the network, you note that each dual-band AP provides for 4 SSIDs in each band with three secure SSIDs and one Open System SSID.
The network runs only 802.11ac APs and uses 20 MHz channels in 2.4 GHz and 400 MHz channels in 5 GHz.
What can you do to reduce the impact of beacon frames on CCI and channel utilization?
- A. Disable SSID broadcasting
- B. Increase the beacon interval
- C. Use only 40 MHz channels
- D. Use the same security across all SSIDs
Answer: A
NEW QUESTION # 56
The data rate for a data frame is 150 Mbps in 5 GHz.
What rate is used to transmit the PHY header information?
- A. 1 Mbps
- B. 75 Mbps
- C. 150 Mbps
- D. 6 Mbps
Answer: A
Explanation:
References:
NEW QUESTION # 57
You are analyzing a packet decode of a Probe Request and notice the SSID element has a length of zero.
What do you conclude about the transmitting STA?
- A. The STA is discovering a list of available BSSs
- B. The STA's WLAN adaptor is disabled
- C. The WLAN adaptor is configured in promiscuous mode
- D. The STA is operating in Ad-Hoc mode
Answer: A
Explanation:
The STA is discovering a list of available BSSs by sending a Probe Request with an empty SSID element.
This is also known as a broadcast Probe Request, as it does not specify any particular SSID to probe for. Any AP that receives this Probe Request will respond with a Probe Response containing its own SSID and other information about its BSS. This way, the STA can learn about all the BSSs in its vicinity and choose which one to associate with . References: CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 191; CWAP-405Certified Wireless Analysis Professional Study and Reference Guide, Chapter 6: MAC Sublayer Frame Exchanges, page 193.
NEW QUESTION # 58
You are evaluating a protocol capture file in Wireshark. The following filter is applied:
wlan_radio.11ac.bandwidth - - 4
What kind of frames are displayed?
- A. Only frames supporting 4 spatial streams
- B. Only frames supporting 4 radio chains
- C. Only 40 MHz frames
- D. Only 80 MHz frames
Answer: D
NEW QUESTION # 59
Using a portable analyzer you perform a packet capture next to a client STA and you can see that the STA is associated to a BSS. You observe the STA sending packets to the AP and the AP sending packets to the STA.
Less than 2% of all packets are retransmissions. You move to capture packets by the AP and, while the retry rate is still less than 2%, you now only see unidirectional traffic from the AP to the client. How do you explain this behavior?
- A. The portable analyzer has a lower receive sensitivity than the AP and while it can't capture the packets from the client STA, the AP can receive them OK
- B. There is a transmit power mismatch between the client and the AP and while the client can hear the APs traffic, the AP cannot hear the client
- C. The STA is transmitting data using more spatial streams than the potable analyzer can support
- D. The portable analyzer is too close to the AP causing CCI, blinding the AP to the clients packets
Answer: A
Explanation:
Receive sensitivity is the minimum signal level that a receiver can detect and decode. Different devices may have different receive sensitivity levels depending on their hardware specifications and antenna configurations. In this scenario, the portable analyzer has a lower receive sensitivity than the AP, meaning that it requires a stronger signal to capture the packets from the client STA. The AP, on the other hand, has a higher receive sensitivity and can receive the packets from the client STA even if they have a weaker signal. This explains why the portable analyzer can only see unidirectional traffic from the AP to the client when capturing near the AP5 References:
* CWAP-403 Study Guide, Chapter 4: PHY Layer Analysis, page 121
* CWAP-403 Objectives, Section 4.3: Analyze PHY layer metrics
NEW QUESTION # 60
To what data rates can a 5 GHz PHY device shift when changers occur in the signal strength?
- A. 24, 18, 12, 6
- B. 24, 18, 12, 5.5
- C. 24, 18, 11, 2
- D. 11, 5.5, 2, 1
Answer: A
NEW QUESTION # 61
What should the To DS and From DS flags be to set to in an Association Response frame?
- A. To DS - 0, From DS = 0
- B. To DS = 1, From DS = 1
- C. To DS = 0, From DS = 1
- D. To DS - 1, From DS = 0
Answer: C
Explanation:
The To DS and From DS flags should be set to 0 in an Association Response frame. An Association Response frame is a type of management frame that is transmitted by an AP to accept or reject an association request from a STA. The To DS (To Distribution System) and From DS (From Distribution System) flags are two bits in the Frame Control field of the MAC header that indicate whether a frame is destined for or originated from the DS (Distribution System), which is a system that connects multiple BSSs together. The To DS and From DS flags can have four possible combinations: 00, 01, 10, or 11. For an Association Response frame, which is sent from an AP to a STA within a BSS, both flags should be set to 0. References: [Wireless Analysis Professional Study Guide CWAP-405], Chapter 5: 802.11 MAC Sublayer, page 121-122
NEW QUESTION # 62
You are troubleshooting VoIP WLAN issues. When performing a PING to a remote device that would be involved in a call link, you see that the time value averages 220 milliseconds.
How much extra delay beyond that recommend for VoIP links is in this link?
- A. There is 70 milliseconds more delay than recommended
- B. There is not enough information because the PING command give round-trip-times
- C. There is no extra delay beyond that recommended, instead there is 80 milliseconds less
- D. There is 80 milliseconds more delay than recommended
Answer: C
NEW QUESTION # 63
......
CWAP-405 Free Certification Exam Material with 120 Q&As : https://vce4exams.practicevce.com/CWNP/CWAP-405-practice-exam-dumps.html