Certified Wireless Specialist (CWS-101) — Questions and Answers

Question 1: Which EAP method uses a server-side certificate and a client-side certificate (mutual TLS) for authentication?

EAP-TLS (Correct answer)
EAP-FAST
EAP-LEAP
PEAP-MSCHAPv2

Correct answer: EAP-TLS

EAP-TLS requires both the RADIUS server and the supplicant to present X.509 certificates, providing mutual authentication.

Question 2: Which wireless topology allows devices to communicate directly with each other without an access point?

Infrastructure BSS
Mesh BSS
Extended Service Set
Independent BSS (IBSS) (Correct answer)

Correct answer: Independent BSS (IBSS)

An IBSS (Independent Basic Service Set), also called ad hoc mode, lets devices communicate peer-to-peer without an AP.

Question 3: A hotel needs to isolate guest Wi-Fi traffic from the property management system on the same physical infrastructure. What is the best solution?

Use only 5 GHz for the management network
Deploy separate cable runs to each AP
Limit AP transmit power for guest SSIDs
Use VLANs mapped to separate SSIDs for guest and management traffic (Correct answer)

Correct answer: Use VLANs mapped to separate SSIDs for guest and management traffic

VLAN segmentation allows multiple logical networks to share the same physical AP and switches while keeping traffic isolated at Layer 2.

Question 4: In a MU-MIMO downlink transmission, what is the maximum number of simultaneous spatial streams supported by 802.11ac Wave 2?

16
2
8
4 (Correct answer)

Correct answer: 4

802.11ac Wave 2 supports downlink MU-MIMO with up to 4 simultaneous spatial streams transmitted to different clients at the same time.

Question 5: What is the recommended minimum RSSI value (in dBm) for reliable VoIP over Wi-Fi?

-67 dBm (Correct answer)
-70 dBm
-90 dBm
-50 dBm

Correct answer: -67 dBm

A minimum RSSI of -67 dBm is commonly recommended for VoIP applications to ensure low latency and packet loss.

Question 6: Which device assigns IP addresses in a wireless network?

DHCP Server (Correct answer)
DNS Server
Firewall
Web Server

Correct answer: DHCP Server

A DHCP (Dynamic Host Configuration Protocol) server automatically assigns IP addresses and other network configuration parameters to devices connected to a network. This simplifies network management by eliminating the need to manually configure each device's IP address, ensuring efficient network operation.

Question 7: After completing a wireless deployment, the best practice for client handoff documentation includes:

Network diagram, AP placement map, SSID/VLAN configuration, and admin credentials in a secure format (Correct answer)
Only a list of equipment serial numbers
Sending raw packet capture files to the client
Verbal summary only, no written records

Correct answer: Network diagram, AP placement map, SSID/VLAN configuration, and admin credentials in a secure format

Comprehensive handoff documentation enables the client to manage, troubleshoot, and expand the network independently after deployment.

Question 8: Which RF propagation effect is responsible for ghosting or shadowing behind large buildings or hills that block a direct signal path?

RF shadowing (blockage) (Correct answer)
Rayleigh scattering
Tropospheric ducting
Specular reflection

Correct answer: RF shadowing (blockage)

RF shadowing occurs when large solid objects block the direct propagation path, creating a 'shadow' zone with significantly reduced signal levels.

Question 9: What is the primary purpose of a Distributed Antenna System (DAS) in wireless networking?

Increase data encryption strength
Increase the number of SSIDs available
Extend coverage in large or obstructed venues (Correct answer)
Reduce channel interference between APs

Correct answer: Extend coverage in large or obstructed venues

A DAS distributes antenna nodes throughout a building or venue to provide consistent wireless coverage in areas where a single AP would struggle.

Question 10: A technician uses Ekahau Pro to perform a passive survey. What is the primary function of a passive survey?

Transmitting test frames to measure throughput
Listening to existing Wi-Fi signals without associating to an AP (Correct answer)
Scanning for rogue APs using active probes
Simulating client roaming between access points

Correct answer: Listening to existing Wi-Fi signals without associating to an AP

A passive survey listens to 802.11 beacon and management frames without associating to any AP, capturing real-world signal data.

Question 11: Which international body coordinates radio frequency spectrum allocation globally and publishes the Radio Regulations that member nations use as a basis for their national rules?

International Telecommunication Union (ITU) (Correct answer)
ICAO (International Civil Aviation Organization)
IEEE Standards Association
ETSI (European Telecommunications Standards Institute)

Correct answer: International Telecommunication Union (ITU)

The ITU is the UN specialized agency responsible for global radio frequency allocation through its Radio Regulations, which all member nations must follow.

Question 12: What is the purpose of a midspan PoE injector in a WLAN deployment?

To boost the wireless signal between the AP and client
To convert coaxial cable signals to Ethernet
To provide wireless backhaul between two access points
To add PoE capability to a non-PoE switch port, powering the AP over the existing Ethernet cable (Correct answer)

Correct answer: To add PoE capability to a non-PoE switch port, powering the AP over the existing Ethernet cable

A midspan PoE injector is inserted between a non-PoE switch and an AP, adding DC power to the Ethernet cable so the AP can be powered without a separate power adapter.

Question 13: A wireless client is experiencing intermittent disconnections during peak hours. What is the most likely cause?

AP overload due to too many associated clients or high channel utilization (Correct answer)
DHCP pool exhaustion on IPv6
Incorrect DNS server settings
Incorrect subnet mask

Correct answer: AP overload due to too many associated clients or high channel utilization

During peak hours, high client density and channel utilization can cause APs to drop or reject clients, leading to disconnections.

Question 14: What propagation effect occurs when atmospheric conditions create a layer that traps RF energy close to the Earth's surface, extending range unexpectedly?

Rayleigh fading
Knife-edge diffraction
Fresnel zone obstruction
Tropospheric ducting (Correct answer)

Correct answer: Tropospheric ducting

Tropospheric ducting traps RF signals in a low-altitude layer, allowing them to travel far beyond their normal range and potentially causing interference.

Question 15: How should an CWS professional present complex findings to non-experts?

Provide detailed written reports without explanation
Use full technical terminology only
Skip complex topics to avoid confusion
Translate into accessible language, use visuals, and verify understanding (Correct answer)

Correct answer: Translate into accessible language, use visuals, and verify understanding

Complex information should be translated into accessible language with visual aids, followed by checking for understanding to ensure effective communication.

Question 16: A logistics company needs to track Wi-Fi-enabled scanners across a 500,000 sq ft warehouse. Which technique allows real-time location tracking using the existing WLAN?

SSID broadcast suppression
Increasing beacon rate to 100ms
Enabling 802.11ac wave 2 MU-MIMO
Wi-Fi RSSI-based triangulation or time difference of arrival (TDoA) using multiple APs (Correct answer)

Correct answer: Wi-Fi RSSI-based triangulation or time difference of arrival (TDoA) using multiple APs

RSSI triangulation or TDoA compares signal strength or timing from multiple APs to estimate client location without additional hardware.

Question 17: Which 802.11 amendment introduced neighbor report and BSS load information to assist clients in making better roaming decisions?

802.11k (Correct answer)
802.11r
802.11i
802.11ac

Correct answer: 802.11k

802.11k provides clients with neighbor AP reports and load information so they can make informed roaming decisions before disconnecting.

Question 18: Which 802.11 feature allows a client to determine the optimal transmit rate by dynamically adjusting MCS based on current channel conditions?

Dynamic rate shifting (DRS) (Correct answer)
Band steering
CCA threshold adjustment
Transmit power control (TPC)

Correct answer: Dynamic rate shifting (DRS)

Dynamic rate shifting allows devices to automatically select the highest MCS (modulation and coding scheme) that channel conditions can support for reliable communication.

Question 19: What does the term 'spatial reuse' refer to in 802.11ax (Wi-Fi 6) hardware?

BSS Coloring technology that allows overlapping networks to transmit simultaneously by identifying frames from different BSSs (Correct answer)
Reusing AP mounting hardware across multiple deployment generations
Using the same physical space for both wired and wireless equipment
Sharing a single antenna across multiple radio chains

Correct answer: BSS Coloring technology that allows overlapping networks to transmit simultaneously by identifying frames from different BSSs

BSS Coloring in 802.11ax enables spatial reuse by tagging frames with a color identifier, allowing APs and clients to ignore transmissions from neighboring BSSs and reduce unnecessary deferral.

Question 20: How should an CWS professional handle unexpected results that differ from predictions?

Ignore the discrepancy if small
Analyze factors, document findings, and adjust the approach based on what was learned (Correct answer)
Blame external factors for the variance
Repeat the exact same approach again

Correct answer: Analyze factors, document findings, and adjust the approach based on what was learned

Unexpected results are learning opportunities. Professional practice requires analysis of contributing factors and adaptation based on those findings.

Question 21: A dual-band access point has two radios. One is operating on the 2.4 GHz band. What band does the second radio typically operate on?

900 MHz
60 GHz
5 GHz (Correct answer)
3.6 GHz

Correct answer: 5 GHz

Dual-band APs simultaneously operate on both the 2.4 GHz and 5 GHz bands, allowing clients to connect on either band based on capability and network conditions.

Question 22: A financial institution requires that all wireless communications be protected against eavesdropping and that each client uses unique encryption keys. Which authentication method meets this requirement?

WPA2-Enterprise with 802.1X using per-user certificates or credentials (Correct answer)
WEP with 128-bit keys
Open authentication with a captive portal
WPA2-Personal with a complex passphrase

Correct answer: WPA2-Enterprise with 802.1X using per-user certificates or credentials

WPA2-Enterprise with 802.1X derives unique per-session encryption keys for each client, preventing one compromised client from decrypting another's traffic.

Question 23: A client asks why their wireless network needs periodic reassessment even after a successful initial deployment. You should explain that:

Once deployed, wireless networks never need to be reviewed
Environmental changes, new devices, and evolving applications can alter RF conditions and capacity needs over time (Correct answer)
Only hardware failures require reassessment
Reassessments are only needed when performance is already degraded

Correct answer: Environmental changes, new devices, and evolving applications can alter RF conditions and capacity needs over time

Wireless environments are dynamic; new interference sources, increased device density, and application changes all affect network performance over time.

Question 24: A client wants to add 50 IoT devices to their existing wireless network. What communication step is most important before implementation?

Tell the client IoT devices are not supported on enterprise Wi-Fi
Deploy the devices without informing the network team
Order new hardware immediately without consulting the client
Assess capacity impact and communicate potential performance changes to the client (Correct answer)

Correct answer: Assess capacity impact and communicate potential performance changes to the client

Adding many IoT devices affects airtime utilization and capacity; clients must understand potential impacts before changes are made.

Question 25: Which tool would a CWS technician use to identify the exact frequency and power level of a non-Wi-Fi interference source like a microwave oven?

Protocol analyzer
Wi-Fi analyzer app
Network performance tester
Spectrum analyzer (Correct answer)

Correct answer: Spectrum analyzer

A spectrum analyzer captures all RF energy across a frequency range, including non-802.11 sources, making it ideal for identifying interference.

Question 26: What is the role of the Distribution System (DS) in an infrastructure-mode WLAN?

Assigns IP addresses to wireless clients
Encrypts traffic between client and AP
Connects access points to each other and to wired networks (Correct answer)
Manages QoS prioritization for voice traffic

Correct answer: Connects access points to each other and to wired networks

The Distribution System interconnects APs and bridges wireless traffic to the wired LAN, enabling roaming and inter-AP communication.

Question 27: In RF propagation, what is 'near-far problem'?

Path loss increasing with distance
Difficulty placing antennas in dense deployments
High-power nearby stations overwhelming receivers trying to hear distant weaker stations (Correct answer)
Interference between co-channel APs

Correct answer: High-power nearby stations overwhelming receivers trying to hear distant weaker stations

The near-far problem occurs when a high-power close transmitter overwhelms the receiver, making it unable to decode signals from more distant, lower-power transmitters.

Question 28: Which propagation model is commonly used to estimate path loss in urban outdoor cellular and Wi-Fi environments?

Okumura-Hata model (Correct answer)
Two-ray ground reflection model
Friis free-space model
COST 231 Walfisch-Ikegami model

Correct answer: Okumura-Hata model

The Okumura-Hata model is widely used for predicting path loss in urban environments based on frequency, distance, and antenna heights.

Question 29: Which of the following is a wireless encryption protocol?

SMTP
FTP
WPA2 (Correct answer)
HTTP

Correct answer: WPA2

WPA2 (Wi-Fi Protected Access II) is a robust and widely adopted security protocol used to secure wireless computer networks. It provides strong encryption and authentication, protecting data transmitted over Wi-Fi from unauthorized access. HTTP, FTP, and SMTP are application-layer protocols, not encryption protocols.

Question 30: Multipath propagation in an indoor environment most commonly results in which condition?

Higher antenna gain
Increased transmit power
Reduced frequency reuse
Signal fading and intersymbol interference (Correct answer)

Correct answer: Signal fading and intersymbol interference

Multipath causes copies of the signal to arrive at different times, leading to fading and intersymbol interference that degrades throughput.

Question 31: An enterprise wants to deploy 802.11ax (Wi-Fi 6) to improve throughput in a dense office with 200+ clients. What key 802.11ax feature specifically addresses simultaneous uplink transmissions from multiple clients?

Beamforming
UL MU-MIMO and OFDMA (Correct answer)
BSS Coloring
WPA3-SAE

Correct answer: UL MU-MIMO and OFDMA

Wi-Fi 6 introduces uplink MU-MIMO and OFDMA, enabling the AP to receive simultaneous transmissions from multiple clients, dramatically improving dense-environment efficiency.

Question 32: A risk assessment identifies that wireless clients in a hospital are using open (unencrypted) Wi-Fi to access the EHR system via HTTPS. Which residual risk remains even with HTTPS?

Patient data is unprotected because HTTPS cannot work on open Wi-Fi
HTTPS certificates are invalid on open networks
Open Wi-Fi prevents authentication to the EHR system
SSL stripping attacks can downgrade HTTPS connections if HSTS is not implemented (Correct answer)

Correct answer: SSL stripping attacks can downgrade HTTPS connections if HSTS is not implemented

Without HSTS (HTTP Strict Transport Security), a man-in-the-middle attacker on the open network can perform SSL stripping to downgrade HTTPS connections to unencrypted HTTP.

Question 33: Which security vulnerability does the KRACK (Key Reinstallation Attack) exploit in WPA2?

Forged EAPOL-Start frames to disrupt authentication
Weak passphrase brute-force during the 4-way handshake
Nonce reuse caused by replaying handshake messages (Correct answer)
IV collision in TKIP encryption

Correct answer: Nonce reuse caused by replaying handshake messages

KRACK exploits the WPA2 4-way handshake by forcing nonce reuse through handshake message replay, allowing decryption of encrypted traffic.

Question 34: An enterprise uses a wireless intrusion prevention system (WIPS). An alert fires for 'channel scan pattern detected.' What type of threat does this MOST likely indicate?

An attacker performing active wireless reconnaissance or site survey (Correct answer)
Normal client roaming behavior between APs
A failing access point with hardware issues
RF interference from a microwave oven

Correct answer: An attacker performing active wireless reconnaissance or site survey

Systematic channel scanning across all 802.11 channels is a characteristic behavior of wireless reconnaissance tools used by attackers to map the RF environment before launching attacks.

Question 35: How should CWS professionals stay current with regulatory changes?

Wait until notified by regulators
Regulations change too infrequently to monitor
Actively monitor updates through professional associations and continuing education (Correct answer)
Rely on colleagues for all regulatory information

Correct answer: Actively monitor updates through professional associations and continuing education

CWS professionals must proactively monitor regulatory changes through professional associations, government publications, and continuing education.

Question 36: A CWS-certified professional advising on a cross-border wireless deployment between the US and Canada should be aware that spectrum coordination between the two countries is governed by which bilateral agreement?

The NAFTA/USMCA trade agreement wireless provisions only
The ITU's Radio Regulations, which automatically harmonize US-Canada borders
No agreement exists; each country manages its border spectrum independently
The Canada-United States Agreement on Sharing the AM Broadcast Band and related bilateral frequency coordination agreements administered by FCC and ISED (Correct answer)

Correct answer: The Canada-United States Agreement on Sharing the AM Broadcast Band and related bilateral frequency coordination agreements administered by FCC and ISED

The US and Canada maintain bilateral spectrum coordination agreements administered by the FCC and Innovation, Science and Economic Development Canada (ISED) to manage shared border-area frequencies.

Question 37: Which frequency band provides the longest range but lowest throughput in typical WLAN deployments?

2.4 GHz (Correct answer)
5 GHz
60 GHz
6 GHz

Correct answer: 2.4 GHz

The 2.4 GHz band propagates farther due to its lower frequency but offers lower throughput and more interference than 5 GHz.

Question 38: A client requests you install additional APs without a new site survey to expand coverage. What is the professionally responsible action?

Refuse the project entirely
Install the APs as requested without question
Conduct at least a brief validation survey before adding APs (Correct answer)
Add APs only in locations with the lowest existing signal

Correct answer: Conduct at least a brief validation survey before adding APs

A wireless professional should always validate the RF environment before making changes to avoid interference and coverage issues.

Question 39: What is the purpose of mechanical or electrical antenna downtilt in a WLAN or cellular deployment?

To direct the coverage pattern downward, reducing inter-cell interference and improving local coverage (Correct answer)
To protect the antenna from physical damage due to wind loading
To increase the effective height of the antenna mounting structure
To increase the antenna's operating frequency range

Correct answer: To direct the coverage pattern downward, reducing inter-cell interference and improving local coverage

Antenna downtilt angles the radiation pattern toward the ground, concentrating coverage on the intended service area and reducing interference with co-channel cells or neighboring deployments.

Question 40: A manufacturing plant running 802.11n reports that adding a new CNC machine causes packet loss on the wireless network. A spectrum scan shows wideband noise. What should you investigate first?

The beacon interval setting
The AP firmware version
The DHCP lease time
Whether the CNC machine's motor or VFD emits RF interference (Correct answer)

Correct answer: Whether the CNC machine's motor or VFD emits RF interference

Variable frequency drives (VFDs) and electric motors in industrial equipment can emit significant broadband RF noise that disrupts wireless communications.

Question 41: When deploying a wireless system at a US federal government facility, which additional framework beyond FCC compliance typically governs wireless security requirements?

HIPAA Security Rule regardless of the agency's mission
ISO 27001 certification as mandated by the Federal Acquisition Regulation
Only FCC Part 15 since federal buildings are FCC-regulated spaces
NIST SP 800-153 guidelines and FISMA requirements (Correct answer)

Correct answer: NIST SP 800-153 guidelines and FISMA requirements

Federal wireless deployments must comply with FISMA and follow NIST SP 800-153 (Guidelines for Securing Wireless Local Area Networks), which establishes security requirements beyond FCC radio authorization.

Question 42: What is the purpose of defining a Minimum Viable Signal (MVS) threshold during network planning?

To configure QoS traffic classes
To establish the lowest acceptable signal level at which devices should operate (Correct answer)
To determine the maximum number of SSIDs
To set the password complexity requirement

Correct answer: To establish the lowest acceptable signal level at which devices should operate

The MVS threshold sets the baseline signal level below which device performance is unacceptable, guiding AP placement decisions.

Question 43: What does RSSI stand for in wireless site surveys?

Radio Signal Strength Index
Remote Site Survey Information
Received Signal Strength Indicator (Correct answer)
Roaming Signal Standard Interface

Correct answer: Received Signal Strength Indicator

RSSI (Received Signal Strength Indicator) measures the power level of a received wireless signal, expressed in dBm.

Question 44: A warehouse deploys 802.11ac APs but forklifts with metal frames cause intermittent connectivity. What RF phenomenon is most responsible?

Doppler shift
Multipath interference caused by metal reflections (Correct answer)
Free-space path loss
Refraction

Correct answer: Multipath interference caused by metal reflections

Metal surfaces reflect RF signals, creating multiple signal paths that arrive at the receiver at different times, causing multipath interference.

Question 45: A user's laptop shows full Wi-Fi bars but a ping test shows 40% packet loss. A spectrum scan reveals a clean RF environment. What should the technician investigate next?

Antenna polarization mismatch
The DNS TTL value
The AP's LED status color
The AP's current client association count and whether it has reached its client limit (Correct answer)

Correct answer: The AP's current client association count and whether it has reached its client limit

When RF looks clean but performance is poor, an overloaded AP at or near its maximum associated client count can cause queuing delays and packet drops.

Question 46: Which IEEE standard defines the core foundation for 802.11 wireless LAN operation that all CWS professionals should understand?

IEEE 802.3
IEEE 802.15
IEEE 802.11-2020 (Correct answer)
IEEE 802.1X

Correct answer: IEEE 802.11-2020

IEEE 802.11-2020 is the consolidated standard governing WLAN operation and is the foundational document for wireless professionals.

Question 47: Which hardware component is responsible for managing the RF environment by dynamically adjusting AP power and channel settings?

RADIUS server
Wireless LAN controller with RRM (Correct answer)
Layer 2 switch
DNS server

Correct answer: Wireless LAN controller with RRM

Radio Resource Management (RRM) is a WLC feature that automatically optimizes channel assignments and transmit power to minimize interference and maximize coverage.

Question 48: Which of the following scenarios represents a conflict of interest that a CWS professional must disclose to a client?

Suggesting a channel plan based on spectrum analysis results
Using a preferred AP mounting bracket brand with no financial relationship
Recommending equipment from a vendor who provides the professional with financial incentives (Correct answer)
Recommending the same AP model used successfully in a prior deployment

Correct answer: Recommending equipment from a vendor who provides the professional with financial incentives

Financial relationships with vendors that could influence product recommendations must be disclosed to clients to maintain professional integrity.

Question 49: A customer complains that wireless performance has degraded since a nearby business installed new equipment. As a CWS professional, what is the appropriate diagnostic first step?

Blame the neighboring business and take no action
Increase transmit power on all APs to overcome the interference
Immediately replace all existing APs with newer models
Perform a spectrum analysis to identify the source and nature of the interference (Correct answer)

Correct answer: Perform a spectrum analysis to identify the source and nature of the interference

Spectrum analysis is the correct first step to objectively identify and characterize interference before recommending a remediation strategy.

Question 50: What is the typical range of a standard Wi-Fi router indoors?

150 feet (Correct answer)
25 feet
500 feet
50 feet

Correct answer: 150 feet

The typical indoor range for a standard Wi-Fi router operating on the 2.4 GHz band is approximately 100-150 feet (30-45 meters). This range can vary significantly depending on environmental factors like walls, interference, and the specific router model and antenna configuration.

Question 51: How should an CWS professional approach a novel situation not covered by standard procedures?

Follow the closest existing procedure exactly
Refuse to proceed under any circumstances
Apply foundational principles, assess risks, consult resources, and document decisions (Correct answer)
Improvise without any documentation

Correct answer: Apply foundational principles, assess risks, consult resources, and document decisions

Novel situations require applying core principles, careful risk assessment, resource consultation, and thorough documentation of the rationale for decisions made.

Question 52: Which modulation scheme offers the highest data rate in the 802.11ax (Wi-Fi 6) standard?

1024-QAM (Correct answer)
4096-QAM
256-QAM
64-QAM

Correct answer: 1024-QAM

Wi-Fi 6 (802.11ax) uses 1024-QAM as its highest modulation, encoding 10 bits per symbol for maximum throughput.

Question 53: A client expects their new wireless network to support VoIP calls without dropouts. Which factor should you proactively communicate about?

QoS policies, fast roaming (802.11r/k/v), and proper SSID design are critical for VoIP quality (Correct answer)
VoIP only works over wired connections
VoIP works the same regardless of roaming configuration
Signal strength is the only factor affecting VoIP quality

Correct answer: QoS policies, fast roaming (802.11r/k/v), and proper SSID design are critical for VoIP quality

VoIP is latency and jitter-sensitive; QoS prioritization, seamless roaming protocols, and SSID segmentation all directly affect call quality.

Question 54: Which of the following BEST describes the risk associated with using WPS PIN authentication on a wireless router?

WPS PIN is vulnerable to online brute-force due to a design flaw splitting the PIN into two halves (Correct answer)
WPS PIN disables WPA2 encryption temporarily
WPS PIN allows any device to bypass MAC filtering
WPS PIN exposes the SSID in plaintext during setup

Correct answer: WPS PIN is vulnerable to online brute-force due to a design flaw splitting the PIN into two halves

The WPS PIN has a design flaw where it is validated in two separate halves (4+3 digits), reducing the effective keyspace from 10^7 to about 11,000 combinations, making it trivially brute-forceable.

Question 55: When conducting an outdoor wireless site survey, which environmental factor is most likely to cause signal multipath?

High humidity
UV radiation
Reflections off buildings, vehicles, and the ground (Correct answer)
Wind speed

Correct answer: Reflections off buildings, vehicles, and the ground

Reflections from hard surfaces cause multipath propagation, where multiple signal copies arrive at the receiver at slightly different times.

Question 56: A hotel client wants guests to have easy Wi-Fi access without a password. What security concern must you communicate?

Open networks expose guest traffic to eavesdropping; a captive portal with client isolation is a safer alternative (Correct answer)
Open networks are as secure as WPA3
Guest Wi-Fi never poses a security risk
Passwords are optional on 5 GHz networks

Correct answer: Open networks expose guest traffic to eavesdropping; a captive portal with client isolation is a safer alternative

Open SSIDs transmit data unencrypted; client isolation and a captive portal provide usability while reducing exposure.

Question 57: Which frequency band is commonly used in Wi-Fi networks?

700 MHz
2.4 GHz (Correct answer)
900 kHz
1 GHz

Correct answer: 2.4 GHz

The 2.4 GHz frequency band is one of the most common bands used for Wi-Fi networks (alongside 5 GHz). It offers a wider range and better penetration through walls compared to 5 GHz, though it typically has lower data rates and is more susceptible to interference from other devices.

Question 58: What is the function of the 802.11k amendment?

Specifies QoS mechanisms for voice and video
Defines fast BSS transition for low-latency roaming
Provides mesh networking capabilities
Enables radio resource measurement to assist client roaming decisions (Correct answer)

Correct answer: Enables radio resource measurement to assist client roaming decisions

802.11k provides Radio Resource Management (RRM), allowing APs to share neighbor reports with clients so they can make better-informed roaming decisions.

Question 59: A Fresnel zone clearance calculation is most critical when designing which type of wireless link?

Cellular handoff zone
Point-to-point outdoor bridge (Correct answer)
Indoor mesh network
Bluetooth piconet

Correct answer: Point-to-point outdoor bridge

Fresnel zone clearance is essential for outdoor point-to-point bridges to ensure the signal path is unobstructed and minimize diffraction losses.

Question 60: What does a wireless site survey heat map primarily display?

Number of clients associated to each AP over time
Channel utilization measured in percentage
CPU utilization of access points across the floor plan
Signal strength or coverage levels overlaid on a physical map (Correct answer)

Correct answer: Signal strength or coverage levels overlaid on a physical map

A heat map visually represents RF signal strength (typically RSSI) or coverage quality overlaid on a floor plan to identify coverage gaps.

Certified Wireless Specialist (CWS-101)

The CWS certification validates entry-level knowledge of 802.11 wireless networking fundamentals, RF characteristics, wireless hardware and software, and organizational Wi-Fi use cases. It is a CWNP foundational certification for IT professionals, sales, and support roles.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds