B. The clients are improperly configured

Answer DescriptionExplanation:

This is because the passphrase for WPA2-Personal is case-sensitive and must match exactly on both the AP and the client. If the passphrase is entered incorrectly on the client, the client will not be able to authenticate with the AP and connect to the network. The AP that covers the problem area is not likely to require a firmware update, fail, or be improperly configured, as it is online and works with other clients that have the correct passphrase. To troubleshoot this issue, you can check the passphrase settings on the clients and make sure they matchwith the AP. You can also try to reconnect the clients to the network or reboot them if necessary. For more information on how to configure WPA2-Personal on your router

B. Use a 40 MHz channel on the 5 GHz radio

Answer DescriptionExplanation:

The least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended is to use a 40 MHz channel on the 5 GHz radio. This solution can double the channel bandwidth and increase the data rates for the 5 GHz capable 802.11ac clients. Using a 40 MHz channel on the 5 GHz radio is also less likely to cause co-channel interference or overlap with other channels than using a 40 MHz channel on the 2.4 GHz radio, which has only three non-overlapping channels. Using a 160 MHz channel on the 5 GHzradio may provide even higher throughput, but it may also consume too much of the available spectrum and cause more interference with other devices or networks. Installing a second AP in the coverage area may also improve the throughput, but it may require additional costs and configuration.

References:

[CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 216; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 206.

A. TWT

Answer DescriptionExplanation:

TWT is the feature of 802.11ax (HE) that is managed with beacon and trigger frames and is primarily a power management method, but also provides more efficient access to the channel used within a BSS. TWT stands for target wake time, which is a mechanism that allows an access point and a client device to negotiate and schedule specific times for data transmission and reception. This enables the client device to enter a low-power sleep mode when it is not expected to communicate with the access point, which saves battery life and reduces power consumption. TWT also reduces contention and interference on the channel used within a BSS, as it coordinates the transmissions of multiple client devices and avoids collisions. TWT is managed with beacon and trigger frames, which are two types of management frames that are used to announce and initiate data exchanges. A beacon frame is a frame that is periodically sent by an access point to advertise its presence, capabilities, and parameters to client devices. A trigger frame is a frame that is sent by an access point or a client device to request or initiate a data transmission with another device. BSS color, UL-MU-MIMO, and OFDMA are other features of 802.11ax (HE) that are not primarily power management methods, but rather performance enhancement methods. BSS color is a feature that assigns a color code to each BSS to differentiate it from other BSSs that use the same channel. This reduces interference and improves spatial reuse of the channel. UL-MU-MIMO is a feature that allows an access point to receive multiple simultaneous transmissions from different client devices using multiple spatial streams. This increases capacity and throughput of the uplink direction. OFDMA is a feature that divides a channel into smaller subchannels called resource units (RUs) that can be allocated to different devices for concurrent transmissions. This increases efficiency and flexibility of the channel utilization.

References: CWNA-109 Study Guide, Chapter 10: Wireless LAN Operation, page 323

B. Capacity analysis results

Answer DescriptionExplanation:

In addition to coverage analysis results, what should be included in a post-deployment site survey report to ensure WLAN users experience acceptable performance is Capacity analysis results. Capacity analysis is a method of testing the ability of the WLAN to support the expected number and type of users, devices, and applications. Capacity analysis can help to determine the optimal number and placement of access points, the appropriate channel and power settings, the required QoS policies, and the expected throughput and latency levels. Capacity analysis results can help to verify that the WLAN meets the performance requirements and service level agreements (SLAs) of the organization. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 548; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 518.

C. Granting access to specific network services or resources according to a user profile.

Answer DescriptionExplanation:

Granting access to specific network services or resources according to a user profile describes the authorization component of a AAA implementation. AAA stands for Authentication, Authorization, and Accounting, which are three functions that are used to control and monitor access to network resources and services. Authentication is the process of verifying that a user is who he says he is, by using credentials such as username, password, certificate, token, or biometric data. Authorization is the process of granting access to specific network services or resources according to a user profile, which defines the user’s role, privileges, and permissions. Accounting is the process of recording and reporting the usage of network services or resources by a user, such as the duration, volume, type, and location of the access. AAA can be implemented by using different protocols andservers, such as RADIUS, TACACS+, LDAP, Kerberos, or Active Directory.

References: 1, Chapter 11, page 449; 2, Section 7.1

A. RTS

Answer DescriptionExplanation:

The frame type that is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS is RTS. RTS stands for Request to Send and is a control frame that is sent by a station to request access to the medium for a specified duration. The RTS frame contains the source and destination MAC addresses, as well as a Network Allocation Vector (NAV) value that indicates how long the medium will be occupied. The destination station responds with a Clear to Send (CTS) frame that echoes the NAV value and grants permission to the source station. All other stations in the BSS hear either the RTS or CTS frame and update their NAV timers accordingly, deferring their transmissions until the medium is free. The RTS/CTS mechanism can be used to prevent hidden node problems, reduce collisions, and protect high data rate frames that use features such as 802.11n or 802.11ac that may not be compatible with legacy stations. ACK, Beacon, and PS-Poll are not used to reserve the medium for high data rate frames.

References:

[CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 112; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 102.

A. OWE

B. WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network

Answer DescriptionExplanation:

An advantage of using WPA3-Personal instead of WPA2-Personal as a security solution for 802.11 networks is that WPA3-Personal, also called WPA3-SAE, uses a stronger authentication exchange to better secure the network. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. SAE uses a Diffie-Hellman key exchange with elliptic curve cryptography (ECC) to establish a pairwise master key (PMK) between the AP and the client without revealing it to any eavesdropper. SAE also provides forward secrecy, which means that if one PMK is compromised, it does not affect the security of other PMKs. WPA2-Personal uses Pre-Shared Key (PSK) as the key exchangeprotocol, which is vulnerable to offline brute-force attacks if the passphrase is weak or leaked. Both WPA3-Personal and WPA2-Personal use AES for encryption, so there is no difference in that aspect. WPA3-Personal does not use a different encryption algorithm than WPA2-Personal, but rather a different key exchange protocol.

References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.