CWS Technology & Digital Tools 3 — Questions and Answers
Question 1: Which 802.11 frame type is captured during a passive site survey to determine AP presence and basic BSS parameters?
- Data frames
- Beacon frames (Correct answer)
- ACK frames
- Block ACK frames
Correct answer: Beacon frames
Beacon frames are broadcast by APs at regular intervals and contain SSID, supported rates, channel, and capability information used in passive surveys.
Question 2: A technician uses AirMagnet Survey to perform an active survey. What distinguishes an active survey from a passive survey?
- Active surveys only work on 5 GHz bands
- The survey device associates to an AP and measures real throughput (Correct answer)
- Active surveys use a spectrum analyzer instead of a Wi-Fi adapter
- Active surveys do not require walking the floor plan
Correct answer: The survey device associates to an AP and measures real throughput
In an active survey, the surveying device associates to the network and exchanges data frames, measuring real application-layer performance.
Question 3: Which cloud-based wireless management platform uses a concept called 'Group Policies' to apply different QoS and firewall rules to different SSID user groups?
- Ubiquiti UniFi
- Cisco Meraki (Correct answer)
- Aruba Central
- Ruckus Unleashed
Correct answer: Cisco Meraki
Cisco Meraki uses Group Policies to define unique bandwidth limits, firewall rules, and traffic shaping settings applied per SSID or user group.
Question 4: What does the 'noise floor' reading in a Wi-Fi analyzer indicate?
- The maximum transmit power of nearby APs
- The ambient RF energy level in the absence of a desired signal (Correct answer)
- The number of client devices currently associated to an AP
- The channel utilization percentage at a given location
Correct answer: The ambient RF energy level in the absence of a desired signal
The noise floor represents background RF energy from thermal noise and interference; a lower noise floor enables better SNR for wireless communications.
Question 5: In the context of wireless troubleshooting tools, what is a 'rogues alarm' in a WLAN management system?
- An alert triggered when AP CPU utilization exceeds 90%
- A notification when an unauthorized AP is detected on the network (Correct answer)
- A warning when a client exceeds its bandwidth allocation
- An alert for failed RADIUS authentication attempts
Correct answer: A notification when an unauthorized AP is detected on the network
A rogues alarm notifies administrators when an unauthorized AP is detected operating on the same channel or infrastructure, posing a security threat.
Question 6: A technician reviewing a Wireshark capture notices EAPOL frames exchanged between a client and AP. What process do these frames indicate?
- DHCP IP address assignment
- The WPA2/WPA3 four-way handshake authentication process (Correct answer)
- 802.11r fast roaming transition
- SNMP polling of the AP management interface
Correct answer: The WPA2/WPA3 four-way handshake authentication process
EAPOL (Extensible Authentication Protocol over LAN) frames carry the WPA2/WPA3 four-way handshake used to derive and confirm encryption keys.
Question 7: Which feature in professional site survey software allows a pre-deployment 'what-if' analysis before installing any physical APs?
- Retrospective survey replay
- Predictive simulation mode (Correct answer)
- Live channel selection
- Packet loss trending
Correct answer: Predictive simulation mode
Predictive simulation mode lets technicians place virtual APs on a floor plan and model expected coverage using RF propagation algorithms.
CWS Technology & Digital Tools 3
Which 802.11 frame type is captured during a passive site survey to determine AP presence and basic BSS parameters?