Free Certified Wireless Analysis Professional Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Certified Wireless Analysis Professional practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1An analyst's WLAN capture contains Ethernet-style data headers but no 802.11 management frames. Which capture change addresses this limitation on an adapter and driver that support it?

   1. A. Enable monitor mode and select raw 802.11 capture.
   2. B. Enable promiscuous mode while keeping managed-mode capture.
   3. C. Increase the snapshot length of the Ethernet-style capture.
   4. D. Apply a management-subtype filter to the Ethernet-style capture.

   Answer: A

   Explanation: "When not in monitor mode, the adapter might only capture data packets; you may have to put the adapter into monitor mode to capture management and control packets." Monitor mode with raw 802.11 capture addresses acquisition of management frames. Promiscuous mode does not necessarily provide monitor-mode frames; a longer snapshot or a filter cannot recover management frames absent from the capture.

   Reference: Wireshark Wiki: WLAN (IEEE 802.11) capture setup — Packet Types; Link-Layer (Radio) packet headers

2. 2Which spectrum analyzer view displays signal power against frequency rather than the history of power across successive sweeps?

   1. A. A real-time FFT plot.
   2. B. A swept spectrogram plot.
   3. C. A device-count trend plot.
   4. D. A channel-availability trend plot.

   Answer: A

   Explanation: "This line chart shows the power level of a signal on the channels or frequencies monitored by a spectrum monitor radio." The FFT view plots spectral power. A swept spectrogram adds sweep history; the other trends plot device counts or availability.

   Reference: HPE Aruba Networking Wireless Operating System 8.12.0.0 User Guide — Spectrum Analysis, Table 182, p. 961

3. 3Which PHY designation is associated with IEEE 802.11ax?

   1. A. High Throughput (HT).
   2. B. Very High Throughput (VHT).
   3. C. High Efficiency (HE).
   4. D. Extremely High Throughput (EHT).

   Answer: C

   Explanation: "802.11ax, also known as high efficiency wireless (HE)" HE identifies 802.11ax. HT, VHT and EHT identify different PHY generations.

   Reference: IEEE 802.11ax: The Sixth Generation of Wi-Fi — 3.1, Drivers for 802.11ax

4. 4For an ordinary unfragmented, unaggregated data frame, which combination describes the MPDU rather than the MSDU?

   1. A. The upper-layer payload without a MAC header or trailer.
   2. B. The complete PPDU with its PHY preamble and PHY header.
   3. C. The data payload together with a MAC header and trailer.
   4. D. Only the MAC header and trailer, excluding the payload.

   Answer: C

   Explanation: "It is comprised of an MSDU (data payload), a MAC header, and a trailer." The MPDU includes MAC header, payload and trailer. The MSDU lacks the MAC wrapping; the complete PPDU adds PHY framing; header and trailer alone omit the payload.

   Reference: CWNP Exam Terms — MPDU, p. 4

5. 5A legacy DCF station hears no current RF transmission, but its NAV still has time remaining from a valid reservation. What does the NAV represent?

   1. A. A virtual carrier-sense reservation that can defer access.
   2. B. The measured RF noise power of the current channel.
   3. C. The maximum number of failed transmission attempts.
   4. D. The PHY rate selected for the next data transmission.

   Answer: A

   Explanation: "Stations place the duration field contents in their network allocation vector (NAV)." NAV is the virtual reservation timer. Physical silence alone does not erase it; it is not a noise value, retry limit or rate selector.

   Reference: CWAP Certified Wireless Analysis Professional Official Study Guide, First Edition — Chapter 2, Duration Values, p. 44

6. 6A client discovers an infrastructure BSS by listening for periodic beacons without sending discovery requests. Which discovery method is shown?

   1. A. Active scanning.
   2. B. Passive scanning.
   3. C. Open System authentication.
   4. D. Reassociation.

   Answer: B

   Explanation: "The station waits for the transmission of beacon management frames" Passive scanning listens for advertisements. Active scanning transmits probes; authentication and reassociation are later access operations rather than this discovery method.

   Reference: CWAP Certified Wireless Analysis Professional Official Study Guide, First Edition — Chapter 2, Passive Scanning, p. 33

7. 7A single-radio monitor is hopping among channels while an analyst investigates missing responses from one AP on a known channel. How should the analyst change the capture to reduce gaps caused by hopping?

   1. A. Increase the displayed timestamp precision.
   2. B. Apply a display filter for the AP's address.
   3. C. Lock the monitor to the AP's fixed channel.
   4. D. Shorten the stored length of each packet.

   Answer: C

   Explanation: "If you are capturing traffic to troubleshoot a wireless connectivity problem, or to analyze traffic for a single AP or station, it's best to capture on a single, fixed channel." A fixed channel removes off-channel intervals for this AP. Filtering, timestamp formatting and slicing do not change where the radio listens.

   Reference: Wireshark Wiki: WLAN (IEEE 802.11) capture setup — Channel Hopping

8. 8In the AOS-8.12 swept spectrogram, which quantities are represented by the horizontal and vertical axes?

   1. A. Horizontal: power; vertical: frequency.
   2. B. Horizontal: time; vertical: channel.
   3. C. Horizontal: frequency; vertical: time.
   4. D. Horizontal: duty cycle; vertical: power.

   Answer: C

   Explanation: "the x-axis represents frequency or channel and the y-axis represents time." Color encodes the plotted power or duty-cycle quantity; the axes locate frequency and time.

   Reference: HPE Aruba Networking Wireless Operating System 8.12.0.0 User Guide — Swept Spectrogram, p. 982

9. 9How can an 802.11ax AP exchange frames with an 802.11ac client that does not support HE PPDUs?

   1. A. By using 802.11ac-formatted PPDUs for that client.
   2. B. By sending HE-formatted PPDUs at a legacy data rate.
   3. C. By restricting HE-formatted PPDUs to a 20 MHz channel.
   4. D. By extending the guard interval of HE-formatted PPDUs.

   Answer: A

   Explanation: "An 802.11ax access point can communicate with 802.11a/g/n and 802.11ac clients using 802.11a/g/n or 802.11ac formatted PPDUs." The AP selects a format the older client supports. Changing the rate, channel width or guard interval does not turn an HE-format transmission into a supported 802.11ac-format transmission.

   Reference: IEEE 802.11ax: The Sixth Generation of Wi-Fi — 5.1, Compatibility

10. 10Which arrangement correctly describes aggregation in an A-MSDU frame?

    1. A. Multiple MSDUs carried inside one MPDU.
    2. B. Multiple MPDUs carried inside one PPDU.
    3. C. One MSDU divided across several MPDUs.
    4. D. One MSDU carried in one unaggregated MPDU.

    Answer: A

    Explanation: "Allows multiple MSDUs to be encapsulated within a single MPDU" A-MSDU combines service data units within one MAC frame. B describes A-MPDU, C describes fragmentation, and D describes unaggregated carriage.

    Reference: How to Enable Frame Aggregation on Arista APs — Introduction: Aggregated MSDU