CWDP-305 CWNP Certified Wireless Design Professional Free Practice Exam Questions (2025 Updated)

Comprehensive and Detailed Explanation:

While SSID hiding might seem like a security measure, it's not effective because certain management frames must include the SSID, making it discoverable. Specifically, theAssociation Requestframe always includes the SSID. This frame is sent by a client device when it attempts to associate with an access point (AP), and it must specify the SSID to identify the desired network. Therefore, even if the SSID is hidden in beacon frames, it can still be detected through association requests.

Beacon frames: Typically used by APs to advertise their presence; can be configured to omit the SSID.

Probe request/response frames: Used during active scanning; the SSID may or may not be included.

Authentication response frames: Do not necessarily include the SSID.

Comprehensive and Detailed Explanation:

Passive RFID tags lack an internal power source and rely on energy transmitted from an RFID reader to power up and communicate. In WLAN designs supporting RTLS, passive tags do not directly communicate with the WLAN infrastructure. Instead, they depend on tag readers to capture their information and relay it to the location server. This design consideration is crucial for accurate asset tracking and management.

WPA2-Personal and WPA2-Enterprise are ideal security solutions for protecting VoWiFi communication in an RSN requiring low-latency reassociations and no fast secure roaming protocols. WPA2-Personal uses a pre-shared key (PSK) to authenticate and encrypt the communication between the VoWiFi device and the access point. WPA2-Enterprise uses 802.1X/EAP to authenticate the VoWiFi device and the RADIUS server, and then derives a unique encryption key for each session. Both WPA2-Personal and WPA2-Enterprise use AES-CCMP as the encryption algorithm, which provides strong security and low overhead. WPA2-Personal and WPA2-Enterprise also support key caching and pre-authentication mechanisms, which reduce the latency and disruption during reassociations. These features are essential for maintaining the quality of service and user experience for VoWiFi communication.

WPA-Personal, WEP, and 802.1X/EAP are not ideal security solutions for protecting VoWiFi communication in an RSN requiring low-latency reassociations and no fast secure roaming protocols. WPA-Personal uses TKIP as the encryption algorithm, which is less secure and more computationally intensive than AES-CCMP. WPA-Personal also does not support key caching and pre-authentication mechanisms, which increase the latency and disruption during reassociations. WEP is an outdated and insecure encryption algorithm that can be easily cracked by attackers. WEP also does not support any authentication or key management mechanisms, which expose the VoWiFi communication to various attacks. 802.1X/EAP is an authentication framework, not a security solution. 802.1X/EAP alone does not provide any encryption or key management for the VoWiFi communication. 802.1X/EAP must be combined with a robust encryption algorithm, such as AES-CCMP, to provide adequate security for VoWiFi communication. References: CWNP, CWDP Certified Wireless Design Professional Official Study Guide, Security Considerations for Voice over Wi-Fi (VoWiFi) Systems, Top 13 VoIP Security Issues and How to Combat Them

CAPWAP and DTLS are the type of standards-based encryption used by office extension APs for the traffic tunnel. Office extension APs are wireless access points that can be deployed in remote locations and connect to a central wireless controller via a secure tunnel over the Internet. CAPWAP is the Control and Provisioning of Wireless Access Points protocol, which defines how the wireless controller and the office extension APs communicate and exchange control and data messages. DTLS is the Datagram Transport Layer Security protocol, which provides encryption and authentication for the CAPWAP tunnel. DTLS is based on TLS, but it uses UDP instead of TCP as the transport layer protocol, which makes it more suitable for real-time applications. DTLS protects the CAPWAP tunnel from eavesdropping, tampering, and replay attacks, and ensures the confidentiality and integrity of the wireless traffic. References: CWNP, CWDP Certified Wireless Design Professional Official Study Guide, Configure OEAP and RLAN on Catalyst 9800 WLC, Hardening Microsoft 365, Office 2021, Office 2019 and Office 2016

Orthogonal Frequency Division Multiple Access (OFDMA), introduced in 802.11ax, enhances efficiency by dividing a channel into smaller sub-channels called Resource Units (RUs). This allows multiple devices to transmit simultaneously within the same channel bandwidth, reducing latency and improving throughput. Unlike previous standards like 802.11n and 802.11ac, which primarily support single-user transmissions per channel, OFDMA's ability to handle multiple concurrent transmissions without relying on MU-MIMO leads to more efficient spectrum utilization and better performance in dense environments.

Comprehensive and Detailed Explanation:

In a centralized WLAN architecture, the WLAN controller is responsible for managing QoS (Quality of Service) settings. When sending an 802.11 frame to a lightweight AP, the controller places the User Priority (UP) value in the QoS Control field of the 802.11 frame header. This ensures that the frame is transmitted with the appropriate priority over the wireless medium, maintaining QoS for applications such as voice and video.

To validate fast roaming (802.11r), a protocol analyzer is required to capture authentication frames and reassociation frames between APs. These allow you to verify if fast BSS transitions are occurring and if the endpoint is participating in FT.

From CWDP-305:

“Fast BSS Transition (802.11r) validation requires capturing EAP exchanges and reassociation frames during roaming. A protocol analyzer with multiple adapters can monitor channels simultaneously during transitions.”

— Reference: CWDP-305 Official Study and Reference Guide, Chapter on Post-Design ValidationandTroubleshooting

Upgrading access points (APs) from 802.11n to 802.11ac can offer higher throughput and improved performance. However, to realize these benefits, client devices must also support the newer standard. If the clients remain on 802.11n, they cannot take advantage of 802.11ac features such as wider channels, higher modulation schemes, and beamforming.

Therefore, the most likely reason for the unchanged throughput is that the clients were not upgraded to support 802.11ac.

If an access point (AP) fails to power up via Power over Ethernet (PoE), but the Ethernet cable functions correctly with other devices, the most probable cause is that the PoE switch has exhausted its power budget.Each PoE switch has a maximum power capacity, and exceeding this limit can prevent additional devices from receiving power.Extreme Networks

The CWDP-305 Official Study and Reference Guide discusses the importance of monitoring PoE budgets during WLAN deployments.

In the 2.4 GHz band, 40 MHz channels are formed by bonding two adjacent 20 MHz channels. The primary channel is the one the client uses to initiate communication, and the secondary channel is either above (+1) or below (-1) the primary.

For channel 4 as primary with a +1 secondary offset:

Primary channel: 4 (2.427 GHz)

Secondary channel: 5 (2.432 GHz)

This configuration stays within the allowed channels 1-11.

Comprehensive and Detailed Explanation:

An elevation chart provides a vertical radiation pattern of an antenna, which is essential for understanding how the antenna directs energy above and below the horizon. In bridge link deployments, especially over varying terrains or between buildings of different heights, the elevation pattern helps in aligning antennas to ensure optimal signal propagation and reception. Requesting elevation charts from antenna vendors allows for informed decisions on antenna placement and orientation, leading to more reliable and efficient wireless links.

The initiation of a project requires a formal document that authorizes its commencement and outlines its objectives, scope, stakeholders, and overall framework. This document is known as theProject Charter.

As detailed in the CWDP-305 Official Study and Reference Guide, the Project Charter serves several critical functions:

Authorization: It formally authorizes the existence of the project and provides the project manager with the authority to apply organizational resources to project activities.

High-Level Overview: The charter outlines the project's purpose, objectives, and high-level requirements, offering a clear understanding of what the project aims to achieve.

Stakeholder Identification: It identifies key stakeholders and their roles, ensuring that everyone involved understands their responsibilities and the project's governance structure.

Other documents listed, such as the Budget, Bill of Materials, and Work Breakdown Structure, are essential components developed during the planning phase but are not the initiating document.

The Effective Isotropic Radiated Power (EIRP) is calculated using the formula:

Omni Calculator

+1

The Things Network

+1

EIRP (dBm) = Transmit Power (dBm) + Antenna Gain (dBi) - Cable Loss (dB)

The Things Network

+1

blog.iptel.com.au

+1

Assuming negligible cable loss, we first convert the transmit power from milliwatts to dBm:

wifinigel.blogspot.com

+1

Everything RF

+1

Transmit Power = 25 mW = 10 * log10(25) ≈ 14 dBm

Now, adding the antenna gain:

EIRP = 14 dBm + 3 dBi = 17 dBm

Therefore, the EIRP of the APs in this design is 17 dBm.

The primary objective of the initial pre-deployment meeting is to communicate the design decisions to the deployment team, ensuring they understand the design documentation.This alignment is crucial for the successful implementation of the WLAN infrastructure as per the design specifications.

The CWDP-305 Official Study and Reference Guide highlights the importance of clear communication during the deployment phase.

Comprehensive and Detailed Explanation:

Real Time FFT stands for Real Time Fast Fourier Transform.It is a spectrum analysis tool that displays the maximum signal amplitude detected at each frequency in real time.This visualization helps in identifying transient RF events, such as sporadic interference or brief signal spikes, which might not be captured in averaged spectrum analyses.By providing immediate feedback on the RF environment, Real Time FFT graphs are invaluable for troubleshooting and optimizing WLAN performance.

The Received Signal Strength Indicator (RSSI) is a measure of the power present in a received radio signal. While it is commonly used in WLAN location-based services due to its simplicity and the fact that it doesn't require additional hardware, RSSI-based positioning is susceptible to environmental factors like multipath propagation and signal attenuation, leading to lower accuracy.

In contrast:

Angle of Arrival (AoA) determines the direction of the incoming signal, offering better accuracy.

Time of Arrival (ToA) measures the time it takes for a signal to travel from the transmitter to the receiver, providing precise distance measurements.

Time Difference of Arrival (TDoA) calculates the difference in arrival times between multiple receivers, enhancing location accuracy.

To authenticate users against an LDAP database for WLAN access, a RADIUS (Remote Authentication Dial-In User Service) server must be implemented. RADIUS acts as an intermediary between the WLAN infrastructure and the LDAP directory, facilitating authentication requests. When a user attempts to connect to the WLAN, the access point forwards the authentication request to the RADIUS server, which then queries the LDAP directory to verify the user's credentials. This integration ensures centralized authentication and enhances security by leveraging existing directory services.

Comprehensive and Detailed Explanation:

WPA/WPA2-Personal is typically used in scenarios where:

A.Client devices lack support for 802.1X/EAP, making enterprise authentication methods unfeasible.

C.Devices are provisioned in bulk with shared credentials, simplifying deployment without the complexity of individual 802.1X configurations.

However:

B.High-latency roaming is undesirable; low-latency is preferred for seamless connectivity.

D.Requiring unique access credentials aligns more with WPA/WPA2-Enterprise, which supports individual authentication.