CWNA Case Studies & Practical Application 5

Question 1

A retail chain with 200 stores wants centralized WLAN management without deploying a physical controller at each site. Which deployment model BEST fits this requirement?

Accepted Answer

Cloud-managed APs with a cloud-hosted controller platform

Answer

Cloud-managed WLAN platforms allow centralized configuration and monitoring of APs across all sites without requiring on-premises controllers at each location.

Question 2

During a wireless assessment, a consultant finds that the corporate WLAN uses PEAP-MSCHAPv2 for authentication. The client is concerned about certificate validation. What vulnerability exists if certificate validation is disabled on clients?

Accepted Answer

An attacker can deploy a rogue RADIUS server and capture MSCHAPv2 credentials

Answer

Without server certificate validation, clients will authenticate to any RADIUS server presenting any certificate, allowing attackers to capture and crack MSCHAPv2 credentials offline.

Question 3

A warehouse uses 802.11ac WLAN for forklift-mounted scanners. The forklifts travel the full length of 300-meter aisles. Connectivity drops occur mid-aisle. What is the BEST solution?

Accepted Answer

Add APs mid-aisle and configure aggressive roaming thresholds on the scanners

Answer

Adding mid-aisle APs reduces roaming distances, and configuring aggressive roaming thresholds ensures forklifts roam before signal becomes critically weak.

Question 4

An enterprise WLAN deployment uses 802.1X with EAP-TLS. A new employee cannot connect wirelessly after receiving a laptop. The RADIUS logs show 'certificate not found.' What is the MOST likely cause?

Accepted Answer

The client device has not yet received a user or machine certificate from the PKI

Answer

EAP-TLS requires a valid client certificate; if the device has not yet received a certificate from the organization's CA via auto-enrollment, authentication will fail.

Question 5

A hotel IT team is asked to provide isolated guest Wi-Fi where guests cannot communicate with each other. Which AP feature MUST be enabled to enforce this?

Accepted Answer

Client isolation (also called AP isolation or layer-2 isolation)

Answer

Client isolation prevents wireless clients on the same SSID from communicating directly with each other at layer 2, enforcing privacy in guest networks.

CWNA - Wireless Network Administrator Practice Test

CWNA - Wireless Network Administrator Practice Test

CWNA Case Studies & Practical Application 5