CWNP CWNA-109 Dumps

The common spectrum analyzer view that you should use for this analysis is the Waterfall/Spectrogram view. The Waterfall/Spectrogram view shows the signal from the interfering device over time on a three-dimensional graph. The x-axis represents frequency, the y-axis represents time, and the z-axis represents amplitude or power. The color of each pixel indicates the signal strength at a given frequency and time. The Waterfall/Spectrogram view can help you identify the characteristics of the interference source, such as its frequency range, duty cycle, modulation type, and pattern. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 524; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 494.

VHT TXOP (Very High Throughput Transmit Opportunity) power save is a feature introduced with the 802.11ac amendment, which is designed to improve the power efficiency of devices connected to a WLAN. This feature enhances battery life in several ways, compared to the legacy Power Save mode:

• Enhanced Power Saving: VHT TXOP power save allows devices to disable more components of the WLAN transceiver when they are in a low power state. This reduces the power consumption during periods when the device is not actively transmitting or receiving data.
• Intelligent Wake-Up Mechanisms: It employs more sophisticated mechanisms for devices to determine when they need to wake up and listen to the channel, further reducing unnecessary power usage.
• Optimized Operation: This power save mode is optimized for the high-throughput environment of 802.11ac networks, allowing devices to efficiently manage power while maintaining high performance.

Legacy Power Save mode, introduced in earlier versions of the 802.11 standards, does not provide the same level of component disablement or the intelligent wake-up mechanisms found in VHT TXOP power save, making option B the correct answer.

References:

• IEEE 802.11ac-2013 Amendment: Enhancements for Very High Throughput for Operation in Bands below 6 GHz.
• CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.

The least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended is to use a 40 MHz channel on the 5 GHz radio. This solution can double the channel bandwidth and increase the data rates for the 5 GHz capable 802.11ac clients. Using a 40 MHz channel on the 5 GHz radio is also less likely to cause co-channel interference or overlap with other channels than using a 40 MHz channel on the 2.4 GHz radio, which has only three non-overlapping channels. Using a 160 MHz channel on the 5 GHzradio may provide even higher throughput, but it may also consume too much of the available spectrum and cause more interference with other devices or networks. Installing a second AP in the coverage area may also improve the throughput, but it may require additional costs and configuration. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 216; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 206.

 The data rate of a signal is the speed that the data bits in individual 802.11 data frames are sent, but it does not account for the actual amount of data that can be transmitted over time. The throughput of a connection is the flow of information over time, which is affected by various factors such as data encoding, modulation, encryption, airtime utilization, noise levels, interference, etc. Therefore, the throughput is always lower than the data rate. According to one of the web search results1, the actual throughput is normally 60-70 percent of the supported data rates. So, for a connection with a data rate of 150 Mbps, the expected throughput would be around 90-105 Mbps.

The guard interval is a short period of time inserted between the symbols of an OFDM signal to prevent inter-symbol interference and improve the robustness of the transmission1. The guard interval can have different values depending on the 802.11 standard and the configuration of the device. For example, 802.11n supports two guard intervals: 800 ns (normal) and 400 ns (short)2. 802.11ac supports the same guard intervals as 802.11n, plus an optional 200 ns guard interval for 80 MHz and 160 MHz channels3. 802.11ax supports three guard intervals: 800 ns, 1600 ns, and 3200 ns4.

The guard interval affects the data rate because it determines the duration of each symbol. A shorter guard interval means more symbols can be transmitted in a given time, resulting in a higher data rate. However, a shorter guard interval also means less protection against inter-symbol interference, which may degrade the signal quality and increase the error rate. Therefore, there is a trade-off between data rate and reliability when choosing the guard interval.

The MCS tables for HT and VHT PHY devices show the data rates for different combinations of modulation, coding, channel width, spatial streams, and guard intervals. For example, for a VHT device using MCS 9 with QAM-256 modulation, 5/6 coding rate, 80 MHz channel width, and one spatial stream, the data rate is 433.3 Mbps with a normal guard interval (800 ns) and 486.7 Mbps with a short guard interval (400 ns)2. Therefore, the guard interval impacts the data rate according to the MCS tables.

WPA2 (Wi-Fi Protected Access 2) is a security certification program developed by the Wi-Fi Alliance to secure wireless computer networks. It is important to understand the following:

• WPA2 and the 802.11 Standard: While WPA2 is based on elements of the 802.11i amendment to the 802.11 standard, it is not itself a standard but rather a certification to ensure devices comply with certain security criteria, including the correct implementation of CCMP (Counter Mode Cipher Block Chaining Message Authentication Code Protocol) and AES (Advanced Encryption Standard).
• CCMP/AES Implementation: WPA2 enhances the security of wireless networks by using CCMP for encryption, which is based on AES, a robust encryption algorithm. This represents a significant security improvement over WEP (Wired Equivalent Privacy) and WPA (Wi-Fi Protected Access) that used TKIP (Temporal Key Integrity Protocol).
• WPA vs. WPA2: WPA was the interim security enhancement over WEP, utilizing TKIP for encryption. WPA2, however, moved to the more secure AES-based encryption method. Contrary to option C, WPA2 does not enhance security by using TKIP; it uses CCMP/AES.

Therefore, option B correctly describes WPA2 as a certification program ensuring devices properly implement the more secure CCMP/AES encryption methods.

References:

• Wi-Fi Alliance website for WPA2 certification details.
• IEEE 802.11i-2004: Amendment for Enhanced Security.

What should be inspected to verify proper configuration is DNS. DNS stands for Domain Name System and is a service that resolves hostnames to IP addresses. In a controller-based AP deployment, DNS can be used to help the AP locate the controller by using a predefined hostname such as CISCO-CAPWAP-CONTROLLER or aruba-master. The AP sends a DNS query for this hostname and receives an IP address of the controller as a response. Therefore, if DNS is not configured properly or if there is no DNS entry for the controller hostname, the AP may not be able to locate the controller. NTP, BOOTP, and AP hosts file are not relevant for this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 374; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 364.

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchangeprotocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.

Calibrating the floor plan is what you must do before gathering survey data after the floor plan is imported when using a site survey tool for post-implementation validation. A site survey tool is a software application that can run on a laptop, tablet, smartphone, or other device that has a Wi-Fi adapter and a GPS receiver. A site survey tool can scan the wireless environment and collect information about the detected access points and client stations, such as their SSID, BSSID, channel, signal strength, security, and data rate. A site survey tool can also measure and display various metrics of network performance, such as throughput, jitter, packet loss, delay, and SNR. A site survey tool can also use a floor plan to visualize the wirelesscoverage and quality in different locations on a map. A floor plan is an image file that shows the layout and dimensions of a building or an area where the WLAN is deployed. A floor plan can be imported from various sources, such as a CAD file, a PDF file, an image file, or a Google Maps screenshot. After importing a floor plan into a site survey tool, it is necessary to calibrate the floor plan before gathering survey data. Calibrating the floor plan means adjusting the scale and orientation of the floor plan to match the actual size and direction of the area. Calibrating the floor plan can be done by using a reference point or a reference line that has a known distance or angle in the real world. Calibrating the floor plan ensures that the survey data is accurate and consistent with the physical environment. References: 1, Chapter 7, page 290; 2, Section 4.3

The WLAN feature that would allow the network administrator to control the network resources that can be accessed by each employee based on their department is Role-Based Access Control (RBAC). RBAC is a method of assigning different permissions and policies to users or groups based on their roles in the organization. RBAC can be implemented by using VLANs, ACLs, or firewalls to restrict access to certain network segments or resources. RBAC can also be integrated with 802.1X/EAP authentication to dynamically assign roles and VLANs to users based on their credentials. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 403; [Role-Based Access Control (RBAC) in Wireless Networks], page 1.

Refraction is the bending of an RF signal as it passes through a medium with a different density than free space. This can cause the signal to change its direction and speed, which can affect the accuracy and reliability of wireless communication. Refraction is influenced by factors such as temperature, humidity, and atmospheric pressure12. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 72; CWNA-109Study Guide, Chapter 2: Radio Frequency Fundamentals, page 67.

The two IEEE amendments that should be supported to provide the management frame protection and fast secure roaming security features are 802.11r and 802.11w12.

• 802.11r (Fast BSS Transition): This amendment to the IEEE 802.11 standard permits continuous connectivity aboard wireless devices in motion, with fast and secure client transitions from one Basic Service Set to another1.
• 802.11w (Management Frame Protection): This amendment increases the security of its management frames2.

The fact that is true regarding controllers and APs in a Split MAC architecture is that an IP tunnel is established between the AP and controller for AP management and control functions. A Split MAC architecture is a WLAN architecture where some of the MAC layer functions are performed by the APs (such as encryption, decryption, and frame acknowledgement) and some are performed by the controllers (such as authentication, association, roaming, and QoS). To communicate with each other, the APs and controllers establish an IP tunnel that carries the management and control frames between them. The IP tunnel can use protocols such as Lightweight Access Point Protocol (LWAPP) or Control And Provisioning of Wireless Access Points (CAPWAP). References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 372; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 362.

A common feature of MDM solutions that can be used to protect enterprise data on mobile devices is containerization. Containerization is a technique that creates a separate and secure environment on the mobile device where enterprise data and applications are stored and accessed. Containerization isolates the enterprise data from the personal data and prevents unauthorized access, leakage, or loss of sensitive information. Containerization can also enforce security policies, encryption, authentication, and remote wipe on the enterprise data and applications. Over-the-air registration, onboarding, and self-registration are features of MDM solutions that facilitate the enrollment and management of mobile devices, but they do not directly protect enterprise data on mobile devices. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 336; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 326.

Implementing Fast BSS Transition (FT) for roaming is likely to cause the least impact on the application layer throughput of an 802.11n client station in a 2.4 GHz HT BSS. FT is a feature that allows a client station to quickly switch from one AP to another within the same ESS (Extended Service Set) without having to re-authenticate and re-associate with each AP. This reduces the latency and packet loss that may occur during roaming, thus improving the user experience and maintaining the application layer throughput. FT is defined in the IEEE 802.11r amendment and is also known as Fast Roaming or Fast Secure Roaming. References: , Chapter 9, page 367; , Section 6.3

802.11 QoS is achieved by giving high priority queues a statistical advantage at winning contention. 802.11 QoS is based on the Enhanced Distributed Channel Access (EDCA) mechanism, which defines four access categories (ACs) for different types of traffic: Voice, Video, Best Effort, and Background. Each AC has its own transmit queue and contention parameters, such as Arbitration Interframe Space (AIFS), Contention Window (CW), and Transmission Opportunity (TXOP). These parameters determine how long a station has to wait before transmitting a frame and how long it can occupy the channel. Higher priority ACs have shorter AIFS, smaller CW, and longer TXOP, which means they have more chances to access the channel and send more data than lower priority ACs. However, this does not guarantee that higher priority ACs will always win the contention, as there is still a random backoff process involved. Therefore, 802.11 QoS is a statistical service that provides different levels of service quality based on traffic categories. References: , Chapter 10, page 403; , Section 6.1

The clients are all 802.11n STAs or lower is the likely cause of this behavior. If a WLAN with 100 802.11ac access points is configured to use 80 MHz channels, butonly 40 MHz communications are seen in a particular BSS, it means that the clients in that BSS do not support 80 MHz channels. This could be because they are using older standards, such as 802.11n or lower, that do not support 80 MHz channels. Alternatively, they could be using newer standards, such as 802.11ac or ax, but have their channel width settings limited to 40 MHz or lower due to device capabilities or configuration options. In either case, the AP will adapt to the client’s channel width and use only 40 MHz of the 80 MHz allocated bandwidth to communicate with them. This will reduce the potential throughput and efficiency of the WLAN. References: , Chapter 3, page 111; , Section 3.2

When a station scans for available wireless networks, it listens for beacon frames sent by APs. A beacon frame contains information about the BSS, such as SSID, supported rates, channel, security, etc. The station also measures the signal strength of the beacon frames, which indicates how well the station can communicate with the AP. The signal strength is usually expressed in dBm or RSSI units. The higher the signal strength, the better the connection quality and performance. Therefore, the station can use the signal strength of AP beacons as the primary metric to select the best AP for connectivity to the desired BSS12. References: CWNA-109 Study Guide, Chapter 6: Wireless LAN Devices and Topologies, page 249; CWNA-109Study Guide, Chapter 6: Wireless LAN Devices and Topologies, page 243.

The solution that you recommend is an Overlay WLAN monitoring solution. An Overlay WLAN monitoring solution is a system that uses dedicated sensors or probes to monitor the WLAN performance over time. The sensors are deployed throughout the WLAN coverage area and collect data on various metrics such as signal strength, noise level, channel utilization, interference, throughput, latency, packet loss, and QoS. The sensors send the data to a centralized server or appliance that analyzes the data and provides a single pane of glass for administration and monitoring of the solution. An Overlay WLAN monitoring solution can help to detect and troubleshoot WLAN issues, optimize WLAN performance, and generate reports and alerts. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 538; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 508.

PoE has different standards that define different power levels for PSEs and PDs. The original standard, IEEE 802.3af, defines two classes of PSEs: Class 3 (15.4 W) and Class 4 (30 W). The newer standard, IEEE 802.3at, also known as PoE+, defines four classes of PSEs: Class 0 (15.4 W), Class 1 (4 W), Class 2 (7 W), and Class 3 (12.95 W). The power level received at the PD is always lower than the power level provided by the PSE, due to cable resistance and power dissipation. The IEEE standards specify the minimum power level that must be received at the PD for each class of PSE. For a Class 4 PSE, the minimum power level received at the PD is 25.5 W910. References: CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 295; CWNA-109Study Guide, Chapter 7: Power over Ethernet (PoE), page 289.

Authenticated and Unassociated. According to one of the web search results1, a STA can be authenticated to multiple APs, but it can only be associated to one AP at a time. Association is the process of establishing a logical link between the STA and the AP, which allows the STA to send and receive data frames through the AP2. Therefore, when a STA has authenticated to an AP-1, but still maintains a connection with another AP-2, it means that the STA is authenticated to both APs, but only associated to AP-2. The state of the STA on AP-1 is authenticated and unassociated, which means that the STA can switch to AP-1 without repeating the authentication process, but it cannot send or receive data frames through AP-1 until it becomes associated.

An IBSS is used instead of a BSS is a network configuration that would result in multiple stations broadcasting Beacon frames with the same BSSID but with different source addresses. An IBSS (Independent Basic Service Set) is a type of WLAN that does not use an AP but rather allows stations to communicate directly with each other in a peer-to-peer manner. An IBSS is also known as an ad-hoc network or a peer-to-peer network. In an IBSS, each station generates its own Beacon frames to announce its presence and capabilities to other stations within range. The Beacon frames have the same BSSID, which is randomly generated by one of the stations when creating the IBSS, but they have different source addresses, which are the MAC addresses of each station’s radio interface. The BSSID is used to identify the IBSS and prevent stations from joining other IBSSs with different BSSIDs. References: , Chapter 1, page 25; , Section 1.1

The security option for 802.11 networks that supports SAE and requires protected management frames is WPA3. WPA3 stands for Wi-Fi Protected Access version 3 and is the latest security standard for WLANs. WPA3 supports two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. WPA3 also requires protected management frames, which are encrypted frames that prevent spoofing, replay, or denial-of-service attacks on management frames such as deauthentication or disassociation frames. WPA, WPA2, and OWE do not support SAE or require protected management frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.

The beamwidth of an RF antenna is the angular measure of how wide the main lobe of radiation is. The main lobe is the area where the signal strength is highest and most concentrated. The beamwidth is calculated at the points where the main lobe decreases power by 3 dB, which means it is half of the maximum power. The beamwidth can be measured in both horizontal and vertical planes, depending on how the antenna is oriented. The horizontal beamwidth is also called azimuth, while the vertical beamwidth is also called elevation. The beamwidth patterns on an antenna polar chart indicate how the RF energy is distributed in different directions. References: 1, Chapter 2, page 66; 2, Section 2.3

Sensors should be deployed in critical areas where WLAN performance must be high for best results when using a WLAN monitoring solution that utilizes distributed sensor devices. A WLAN monitoring solution is a system that collects, analyzes, and reports on the status and performance of a WLAN. A WLAN monitoring solution can use different methods to gather data from the WLAN, such as embedded software agents, external hardware probes, or distributed sensor devices. Distributed sensor devices are dedicated devices that are deployed throughout the WLAN coverage area to monitor the wireless traffic and environment. Distributed sensor devices can perform various functions, such as scanning the spectrum, capturing wireless frames, measuring signal quality, detecting rogue access points, testing connectivity, and generating alerts. Distributed sensor devices can provide more accurate and comprehensive data than other methods, but they also require more planning and deployment costs. Therefore, it is important to deploy sensors strategically in critical areas where WLAN performance must be high, such as high-density zones, high-priority applications, or high-security locations. By deploying sensors in critical areas, the WLAN monitoring solution can ensure optimal WLAN performance and reliability in those areas and identify and resolve any issues or problems that may arise. The other options are not the best places to deploy sensors for best results. Deploying sensors in switching closets is not effective because sensors need to be close to the wireless medium to monitor it properly. Deploying sensors every 5 meters and alongside each AP is not efficient because sensors may overlap or interfere with each other and cause unnecessary redundancy or complexity. Deploying sensors above the plenum oneach floor is not practical because sensors may not capture the wireless traffic and environment accurately due to attenuation or reflection from the ceiling materials or objects. References: CWNA-109 Study Guide, Chapter 14: Troubleshooting Wireless LANs, page 4831

DHCP (Dynamic Host Configuration Protocol) is the network service where option 43 must be configured to allow access points to locate controllers. DHCP is a protocol that allows a device to obtain an IP address and other network configuration parameters from a server. In a wireless controller scenario, the access points can use DHCP to request an IP address from a DHCP server, which can also provide the IP address or hostname of the wireless controller as an option in the DHCP response. Option 43 is a vendor-specific option that can be used to encode custom information for different types of devices. For example, Cisco access points can use option 43 to receive the IP address of the wireless controller from the DHCP server, while Aruba access points can use option 43 to receive the hostname of the wireless controller from the DHCP server. This way, the access points can discover the wireless controller and establish a connection with it. References: 1, Chapter 8, page 309; 2, Section 5.2

 This is because the passphrase for WPA2-Personal is case-sensitive and must match exactly on both the AP and the client. If the passphrase is entered incorrectly on the client, the client will not be able to authenticate with the AP and connect to the network. The AP that covers the problem area is not likely to require a firmware update, fail, or be improperly configured, as it is online and works with other clients that have the correct passphrase. To troubleshoot this issue, you can check the passphrase settings on the clients and make sure they matchwith the AP. You can also try to reconnect the clients to the network or reboot them if necessary. For more information on how to configure WPA2-Personal on your router

Patch and panel antennas are directional antenna types that are commonly used by indoor Wi-Fi devices in a MIMO multiple spatial stream implementation. These antennas have a flat rectangular shape and can be mounted on walls or ceilings to provide coverage in a specific direction. They have a moderate gain and a relatively wide beamwidth, making them suitable for multipath environments where signals can reflect off different surfaces and create multiple spatial streams. Patch and panel antennas can also support polarization diversity, which means they can transmit and receive both horizontally and vertically polarized waves, increasing the MIMO performance. References: 1, Chapter 2, page 72; 2, Section 2.4

An access point is configured by a WLAN controller in the management plane of the three networking planes. The management plane is responsible for the configuration, administration, and monitoring of network devices, such as access points, switches, routers, and controllers. The WLAN controller communicates with the access point using a management protocol, such as CAPWAP or SNMP, to send configuration commands and receive status information. The control plane is responsible for the routing, switching, and forwarding of network traffic, such as data frames and control frames. The WLAN controller may also participate in the control plane by performing functions such as authentication, encryption, roaming, and load balancing. The security plane is responsible for the protection of network devices and data from unauthorized access, modification, or disclosure. The WLAN controller may also participate in the security plane by implementing features such as firewall, VPN, IDS/IPS, and WIPS. The data plane is responsible for the transmission and reception of user data, such as voice, video, or web traffic. The WLAN controller may or may not participate in the data plane depending on the architecture of the WLAN. In some cases, the access point forwards the user data directly to the wired network without involving the WLAN controller (distributed data forwarding). In other cases, the access point tunnels the user data to the WLAN controller before forwarding it to the wired network (centralized data forwarding). References: CWNA-109 Study Guide, Chapter 9: Wireless LAN Architecture, page 279

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 289.

 The cipher suite specified by the 802.11-2016 standard and is not deprecated is Counter Mode with CBC-MAC Protocol (CCMP). CCMP is an encryption protocol that uses Advanced Encryption Standard (AES) as the underlying cipher and provides confidentiality, integrity, and origin authentication for wireless data. CCMP is the mandatory encryption protocol for WPA2 and WPA3. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 295; [IEEE Standard for Information technology–Telecommunications and information exchange between systems Local and metropolitan area networks–Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications], page 1560.

Wireless bridging is a WLAN technology role that allows two or more networks to be connected wirelessly over a distance. A wireless bridge consists of two or more APs that are configured to operate in bridge mode and use directional antennas to establish a point-to-point or point-to-multipoint link. Wireless bridging can support high data rates and is suitable for scenarios where running cables is impractical or expensive. To create a wireless link between two buildings on a single campus that supports at least 150 Mbps data rates, wireless bridging is an appropriate solution678. References: CWNA-109 Study Guide, Chapter 6: Wireless LAN Devices and Topologies, page 271; CWNA-109Study Guide, Chapter 6: Wireless LAN Devices and Topologies, page 265; Wi-Fi Wireless Bridging Explained.

The client STA can use Beacon frames transmitted by the AP to verify that an AP supports the same data rates that it supports. Beacon frames are management frames that are periodically broadcasted by the APs to announce their presence, capabilities, and parameters. Oneof the information elements contained in the Beacon frames is the Supported Rates or Extended Supported Rates, which lists the data rates that the AP can use for communication. The client STA can compare its own data rates with those advertised by the AP to determine if they are compatible. Data frames, authentication frames, and probe request frames do not contain information about data rates. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 133; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 123.

The likely problem that causes this scenario is faulty drivers. Drivers are software components that enable the communication between the operating system and the hardware devices, such as the wireless adapters. Faulty drivers can cause various issues with the wireless connectivity, such as not detecting or connecting to certain networks, dropping connections, or reducing performance. Faulty drivers can be caused by corrupted files, outdated versions, incompatible settings, or hardware defects. To fix faulty drivers, you can try to update, reinstall, or roll back the drivers, or contact the manufacturer for support. Interference from non-Wi-Fi sources, DoS attack, or interference from other WLANs are not likely to cause this scenario, as they would affect all devices in the same area, not just the new laptops. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 562; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 532.

OFDM is a modulation method that divides the channel bandwidth into multiple subcarriers, each carrying a single data symbol. This allows for higher data rates and more robust transmissions in multipath environments. OFDM was first introduced inthe 802.11a standard, which operates in the 5 GHz band and supports data rates up to 54 Mbps. Later, the 802.11g standard adopted OFDM for the 2.4 GHz band, and the 802.11n and 802.11ac standards enhanced OFDM with features such as MIMO (Multiple Input Multiple Output), channel bonding, and higher-order modulation schemes to achieve data rates up to 600 Mbps and 6.9 Gbps, respectively. These standards are collectively known as the ERP (Extended Rate PHY), HT (High Throughput), and VHT (Very High Throughput) PHYs . References: [CWNA-109 Study Guide], Chapter 4: Radio Frequency Signal and Antenna Concepts, page 163; [CWNA-109Study Guide], Chapter 4: Radio Frequency Signal and Antenna Concepts, page 157.

A common problem that causes this scenario is captive portal issues. A captive portal is a web page that requires users to authenticate or accept terms and conditions before accessing the Internet through a WLAN. A captive portal is often used for guest networks to provide security and control over the network access. A captive portal works by intercepting the user’s web requests and redirecting them to the portal page until the user completes the required action. However, sometimes the captive portal may not work properly due to various reasons, such as browser settings, firewall rules, DNS configuration, or network errors. This can prevent the user from browsing the Internet or seeing the portal page. To troubleshoot captive portal issues, you can try to use a different browser, clear the browser cache andcookies, disable any VPN or proxy settings, manually enter the portal URL, or contact the network administrator. NTP issues, hardware issues, or IP routing issues are not common problems that cause this scenario. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 343; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 333.