CWAP CWAP-404 Certified Wireless Analysis Professional Online Training
CWAP CWAP-404 Online Training
The questions for CWAP-404 were last updated at Nov 19,2024.
- Exam Code: CWAP-404
- Exam Name: Certified Wireless Analysis Professional
- Certification Provider: CWAP
- Latest update: Nov 19,2024
Which one of the following should be the first step when troubleshooting a WLAN issue?
- A . Identify capture locations
- B . Identify probable causes
- C . Perform an initial WLAN scan and see if any obvious issues stand out
- D . Define the problem
Which one of the best following is an advantage of using display filters instead of capture-time filters?
- A . Display filters allow for focused analysis on just the packets of interest
- B . Once created display filters are reusable for later captures
- C . Display filters only hide the packets from view and the filtered packets can be enabled for view later
- D . Multiple display filters can be applied simultaneously
Using a portable analyzer you perform a packet capture next to a client STA and you can see that the STA is associated to a BSS. You observe the STA sending packets to the AP and the AP sending packets to the STA. Less the 2% of all packets are retransmissions. You move to capture packets by the AP and, while the retry rate is still very low, you now only see unidirectional traffic from the AP to the client.
How do you explain this behavior?
- A . There is a transmit power mismatch between the client and the AP and while the client can hear the Aps traffic, the AP cannot hear the client.
- B . The portable analyzer has a lower receive sensitivity than the AP and while it can’t capture the packets
from the client STA, the AP can receive them OK. - C . The STA is transmitting data using more spatial streams than the potable analyzer can support
- D . The portable analyzer is too close to the AP causing CCI, blinding the AP to the client’s packets
Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software.
When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?
- A . Authentication
- B . Reassociation
- C . 4-Way Handshake
- D . Probe Response
When configuring a long term, forensic packet capture and saving all packets to disk which of the following is not a consideration?
- A . Total capture storage space
- B . Individual trace file size
- C . Real-time packet decodes
- D . Analyzer location
You are performing a multiple adapter channel aggregation capture to troubleshoot a VoIP roaming problem and would like to measure the roaming time from the last VoIP packet sent on the old AP’s channel to the first VoIP packet sent on the new AP’s channel.
Which timing column in the packet view would measure this for you?
- A . Delta
- B . Absolute
- C . Roaming
- D . Relative
Protocol analyzers may present field values in either binary, decimal or hexadecimal.
What precedes a
hexadecimal value to indicate it is hexadecimal?
- A . 0x
- B . %
- C . HEX
- D . 16x
Which one of the these is the most important in the WLAN troubleshooting methodology among those listed?
- A . Interview the network manager about the issues being experienced
- B . Talk to the end users about their experiences
- C . Observe the problem
- D . Obtain detailed knowledge of the wireless vendors debug and logging options
The network administrator at ABC Engineering has taken a large packet capture from one of their APs running in monitor mode. She has very little knowledge of 802.11 protocols but would like to use the capture file to evaluate the overall health and performance of their wireless network. When she asks your advice, which tool do you recommend she opens the packet capture file with?
- A . Capture visualization tool
- B . Protocol analyzer
- C . Spectrum analyzer
- D . WLAN scanner
802.11k Neighbor Requests and Neighbor Reports are sent in what type of Management Frames?
- A . RRM
- B . Action
- C . Beacon
- D . Reassociation Request and Reassociation Response