CWS Case Analysis & Practical Application 3 — Questions and Answers
Question 1: A hotel needs to isolate guest Wi-Fi traffic from the property management system on the same physical infrastructure. What is the best solution?
- Deploy separate cable runs to each AP
- Use VLANs mapped to separate SSIDs for guest and management traffic (Correct answer)
- Use only 5 GHz for the management network
- Limit AP transmit power for guest SSIDs
Correct answer: Use VLANs mapped to separate SSIDs for guest and management traffic
VLAN segmentation allows multiple logical networks to share the same physical AP and switches while keeping traffic isolated at Layer 2.
Question 2: A user in a large open-plan office reports excellent signal strength but very slow speeds. The SNR is 25 dB. What is the most likely cause?
- Insufficient AP transmit power
- High client density causing medium contention and airtime exhaustion (Correct answer)
- Incorrect WPA2 passphrase
- Defective NIC firmware
Correct answer: High client density causing medium contention and airtime exhaustion
In high-density environments, even with strong signal, too many clients competing for airtime on the same channel degrades throughput significantly.
Question 3: You are designing a wireless network for an outdoor stadium seating 50,000 people. Which deployment strategy best addresses high user density?
- Mount high-gain omnidirectional APs on the scoreboard
- Deploy directional sector antennas aimed at seating sections with small, controlled cells (Correct answer)
- Use a single high-power AP per section
- Deploy only 2.4 GHz for maximum range
Correct answer: Deploy directional sector antennas aimed at seating sections with small, controlled cells
Directional antennas focused on seating sections create many small, low-interference cells, distributing client load across more APs and channels.
Question 4: A manufacturing plant running 802.11n reports that adding a new CNC machine causes packet loss on the wireless network. A spectrum scan shows wideband noise. What should you investigate first?
- The AP firmware version
- Whether the CNC machine's motor or VFD emits RF interference (Correct answer)
- The DHCP lease time
- The beacon interval setting
Correct answer: Whether the CNC machine's motor or VFD emits RF interference
Variable frequency drives (VFDs) and electric motors in industrial equipment can emit significant broadband RF noise that disrupts wireless communications.
Question 5: After migrating from WPA2-Personal to WPA2-Enterprise, several legacy printers can no longer connect. What is the most likely reason?
- WPA2-Enterprise uses a different frequency band
- Legacy printers lack 802.1X supplicant software to authenticate to the RADIUS server (Correct answer)
- The SSID name changed during migration
- WPA2-Enterprise requires 5 GHz only
Correct answer: Legacy printers lack 802.1X supplicant software to authenticate to the RADIUS server
WPA2-Enterprise requires an 802.1X supplicant for EAP-based authentication, which many older IoT devices and printers do not support.
Question 6: A network admin notices that an unknown AP with a familiar SSID appears in rogue AP reports. Users may be unknowingly connecting to it. What type of attack is this?
- Deauthentication flood
- Evil twin or honeypot AP attack (Correct answer)
- WPS brute-force attack
- TKIP downgrade attack
Correct answer: Evil twin or honeypot AP attack
An evil twin AP mimics a legitimate SSID to lure clients into connecting, enabling credential theft and man-in-the-middle attacks.
Question 7: A healthcare clinic deploys 802.11ac but finds VoIP calls on wireless drop when nurses move between rooms. What feature should be enabled to fix this?
- Longer DTIM interval
- 802.11k and 802.11v for assisted roaming (Correct answer)
- Disabling QoS on the AP
- Increasing the RTS threshold
Correct answer: 802.11k and 802.11v for assisted roaming
802.11k provides neighbor reports and 802.11v enables BSS transition management, together helping clients roam proactively before signal degrades.
CWS Case Analysis & Practical Application 3
A hotel needs to isolate guest Wi-Fi traffic from the property management system on the same physical infrastructure.
What is the best solution?