CWAP-404認定で究極のガイド [2025年更新]
CWAP-404練習試験と学習ガイドは厳密検証された
CWNP CWAP-404 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 # 109
When configuring a long-term, forensic packet capture and saving all packets to disk which of the following is not a consideration?
- A. Analyzer location
- B. Total capture storage space
- C. Real-time packet decodes
- D. Individual trace file size
正解：C
解説：
Explanation
Real-time packet decodes are not a consideration when configuring a long-term, forensic packet capture and saving all packets to disk. Real-time packet decodes are useful for live analysis and troubleshooting, but they consume CPU and memory resources that could affect the performance of the capture process. For a long-term, forensic packet capture, it is more important to consider the analyzer location, the total capture storage space, and the individual trace file size. These factors affect the quality and quantity of the captured packets and the ease of post-capture analysis34 References:
CWAP-404 Study Guide, Chapter 2: Protocol Analysis, page 49
CWAP-404 Objectives, Section 2.1: Configure protocol analyzers
質問 # 110
You are evaluating a protocol capture file in Wireshark.
The following filter is applied:
wlan_radio.11ac.bandwidth - - 4
What kind of frames are displayed?
- A. Only 40 MHz frames
- B. Only frames supporting 4 radio chains
- C. Only frames supporting 4 spatial streams
- D. Only 80 MHz frames
正解：D
質問 # 111
A PHY Header is added to the PSDU at which sub-layer?
- A. MAC
- B. LLC
- C. Network
- D. PHY
正解：D
解説：
A PHY header is added to the PSDU at the PHY layer. A PHY header is a part of the PPDU that contains information such as modulation, coding, and data rate. The PHY header is added by the PHY layer when it converts a PSDU to a PPDU for transmission, or removed by the PHY layer when it converts a PPDU to a PSDU for reception. The other layers do not add or remove a PHY header.
質問 # 112
Prior to a retransmission what happens to the CWmax value?
- A. Reset to 0
- B. Set to the value of the AIFSN
- C. Doubles and increases by 1
- D. Increases by 1
正解：C
解説：
Explanation
Before a retransmission, the CWmax (Contention Window maximum) value doubles and increases by 1. The CWmax is a parameter that determines the upper limit of the random backoff time that a STA (station) has to wait before attempting to access the medium. The random backoff time is chosen from a range of values between CWmin (Contention Window minimum) and CWmax. The CWmin and CWmax values depend on the AC (Access Category) of the traffic and the PHY type of the STA. If a transmission fails due to a collision or an error, the STA has to retransmit the frame after waiting for another random backoff time. However, to reduce the probability of another collision, the STA increases its CWmax value by doubling it and adding 1.
This increases the range of possible backoff values and spreads out the STAs more evenly. The STA resets its CWmax value to its original value after a successful transmission or after reaching a predefined limit. References: [Wireless Analysis Professional Study Guide CWAP-404], Chapter 7: QoS Analysis, page
196-197
質問 # 113
As it pertains to HT L-SIG TXOP Protection, what statement is true?
- A. Support for L-SIG TXOP Protection is indicated by HT stations in the L-SIG field of the PLCP header of HT-mixed format frames.
- B. L-SIG TXOP Protection is specified for the purpose of protecting OFDM (802.11a/g) and HT- OFDM (802.11n) transmissions from HR/DSSS stations.
- C. An L-SIG TXOP protected frame exchange sequence always begins with an RTS/CTS or a CTS- to-Self.
- D. Support for L-SIG TXOP Protection is indicated in the HT Capabilities Info field of (re)association request frames sent by ERP, OFDM, and HT-OFDM stations.
正解：C
質問 # 114
A manufacturing facility has installed a new automation system which incorporates an 802.11 wireless network. The automation system is controlled from tablet computers connected via the WLAN. However, the automation system has not gone live due to problem with the tablets connecting to the WLAN. The WLAN vendor has been onsite to perform a survey and confirmed good primary and secondary coverage across the facility. As a CWAP you are called in to perform Spectrum Analysis to identify any interference sources. From the spectrum analysis, you did not identify any interference sources but were able to correctly identify the issue. Which of the following issues did you identify from the spectrum analysis?
- A. The tablets are connecting to the wrong SSID
- B. The tablets are entering power save mode and failing to wake up to receive the access points transmissions
- C. A high noise floor has resulted in a SNR of less than 20%
- D. There is a power mismatch between the APs and the clients
正解：D
解説：
The most likely issue that can be identified from the spectrum analysis is a power mismatch between the APs and the clients. A power mismatch occurs when the APs transmit at a higher power level than the clients, or vice versa. This can cause asymmetric communication, where one side can hear the other, but not vice versa. This can result in poor performance, disconnections, or packet loss. A spectrum analysis can reveal a power mismatch by showing different signal amplitudes or RSSI values for the APs and the clients on the same channel or frequency. The other options are not correct, as they cannot be identified from the spectrum analysis alone. The tablets' SSID, power save mode, and noise floor can be determined by using other tools or methods, such as protocol analysis, site survey, or device configuration.
質問 # 115
Which information elements (IE) are contained in an IEEE 802.11 Probe Request frame?
(Choose 2)
- A. Status code
- B. Association ID
- C. Supported rates
- D. RSN IE
- E. SSID
正解：C、E
質問 # 116
When would you expect to see a Reassociation Request frame?
- A. Every time a STA associates to an AP to which it has previously been associated
- B. Only when a STA is using FT roaming
- C. Every time a STA roams
- D. Only when a STA roams back to an AP it has previously been associated with
正解：C
解説：
A Reassociation Request frame is sent every time a STA roams from one AP to another within the same ESS. A Reassociation Request frame is similar to an Association Request frame, but it also contains the BSSID of the current AP that the STA is leaving. This allows the new AP to coordinate with the old AP and transfer the STA's context information, such as security keys, QoS parameters, and buffered frames. This way, the STA can maintain its connectivity and session continuity during roaming.
質問 # 117
Given: The exhibit shows a small network environment with dual-band APs.
What is true of the network shown in this spectrum analyzer trace?
- A. There are at least three APs operating in this environment.
They are operating on channels 149, 153, and 161. - B. Only one AP in this network is configured to use the upper UNII band (UNII-3).
All other APs are in lower 5 GHz channels. - C. There are two 40 MHz BSSs in this environment.
One AP has some 40 MHz traffic while the other AP has no client traffic. - D. Two 802.11a APs are near the spectrum analyzer and are heavily utilized on channels 149 and
153.
正解：C
質問 # 118
What is encrypted within the fourth frame of the 4-Way Handshake?
- A. PMK
- B. GMK
- C. PTK
- D. GTK
正解：D
解説：
The GTK (Group Temporal Key) is encrypted within the third message of the 4-Way Handshake.
The 4-Way Handshake is a process that establishes a secure connection between a STA (station) and an AP (access point) using WPA2 (Wi-Fi Protected Access 2), which is a security protocol that uses AES- CCMP (Advanced Encryption Standard-Counter Mode CBC-MAC Protocol) as its encryption algorithm. The 4-Way Handshake consists of four messages that are exchanged between the STA and the AP. The first message is sent by the AP to the STA, containing the ANonce (Authenticator Nonce), which is a random number generated by the AP.
The second message is sent by the STA to the AP, containing the SNonce (Supplicant Nonce), which is a random number generated by the STA, and the MIC (Message Integrity Code), which is a value that verifies the integrity of the message. The third message is sent by the AP to the STA, containing the GTK, which is a key that is used to encrypt and decrypt multicast and broadcast data frames, and the MIC. The GTK is encrypted with the KEK (Key Encryption Key), which is derived from the PTK (Pairwise Temporal Key). The PTK is a key that is used to encrypt and decrypt unicast data frames, and it is derived from the PMK (Pairwise Master Key), the ANonce, and the SNonce. The fourth message is sent by the STA to the AP, containing only the MIC, to confirm the completion of the 4-Way Handshake. The other options are not correct, as they are not encrypted within the third message of the 4-Way Handshake. The PMK is a key that is derived from a passphrase or obtained from an authentication server, and it is not transmitted in any message of the 4-Way Handshake. The PTK is a key that is derived from the PMK, the ANonce, and the SNonce, and it is not transmitted in any message of the 4-Way Handshake. The GMK (Group Master Key) is a key that is generated by the AP and used to derive the GTK, and it is not transmitted in any message of the 4-Way Handshake.
質問 # 119
Which statements accurately describe IEEE 802.11 EDCA collision handling in a WMM-compliant infrastructure WLAN? (Choose 2)
- A. When frames collide within a QoS STA, data frames from lower priority ACs behave (as it relates to contention) as if there were an external collision on the wireless medium.
- B. After frames collide within a QoS STA and the lower priority AC subsequently gains a TXOP, the retry bit in the MAC header must be set to 1 to indicate a retry.
- C. The WMM specification requires use of RTS/CTS as part of the EDCAF within each QoS STA to avoid internal collisions between ACs.
- D. When a frame transmission on the wireless medium fails, the transmitter may not transmit another frame from any AC or to any destination until the frame experiencing a failure is successfully transmitted or the max retry count for that frame is reached.
- E. Collisions between contending EDCAFs within a QoS STA are resolved within the QoS STA
正解：A、E
質問 # 120
You are creating a baseline configuration for a pool of 100 laptops related to Wi-Fi.
The laptops have dual- band 802.11ac adapters. They are configured for aggressive roaming.
What additional setting might you configure to ensure they access the WLAN on the channels with the least interference assuming the enterprise WLAN is well-designed?
- A. USB speed
- B. Band preference
- C. 802.11h
- D. Power management
正解：B
質問 # 121
You work as an SE for a value-added reseller. A client has an existing deployment of 802.11n Aps and wants to upgrade several BSSs to 802.11ac.
What hardware feature of some enterprise Aps may allow for this without a forklift upgrade?
- A. Converting the 802.11n radio to an 802.11ac radio through software
- B. Replace the antennas with 802.11ac antennas
- C. Simply check the Enable 802.11ac checkbox in the web-based configuration interface
- D. Adding an 802.11ac module to the existing APs
正解：D
質問 # 122
After examining a Beacon frame decode you see the SSID Element has a length of 0. What do you conclude about this frame?
- A. This is a common attack on WISP backend SQL databases
- B. The frame is corrupted
- C. SSID elements always have a length of 0
- D. The beacon is from a BSS configured to hide the SSID
正解：D
解説：
Explanation
If the SSID element has a length of 0 in a Beacon frame decode, it means that the beacon is from a BSS configured to hide the SSID. The SSID element is a part of the Beacon frame that contains the name or identifier of the BSS. The SSID element has two fields: length and value. The length field indicates how many bytes are used for the value field, which contains the actual SSID string. If the length field is 0, it means that there is no value field or SSID string in the element. This is a common technique used by some APs to hide their SSID from passive scanning clients or potential attackers. However, this technique does not provide much security, as there are other ways to discover or reveal the hidden SSID, such as active scanning or capturing probe response or association frames. References: [Wireless Analysis Professional Study Guide CWAP-404], Chapter 5: 802.11 MAC Sublayer, page 122-123
質問 # 123
Given: Adjacent Channel Interference (ACI) can cause frame corruption and poor performance in WLANs. You are using a protocol analyzer in the attempt to detect ACI.
What should you look for in such a scenario?
- A. Look for frames with a low signal strength value in the radio tap header
- B. Look at Retry counts
- C. Look at CRC errors
- D. Capture on the channel you think may be impacted by ACI and see if any frames are captured from adjacent channels
正解：D
質問 # 124
In which element of a Beacon frame would you look to identity the current HT protection mode in which an AP is operating?
- A. ERP Information Element
- B. HT Protection Element
- C. HT Capabilities Element
- D. HT Operations Element
正解：D
解説：
Explanation
The HT protection mode in which an AP is operating can be identified by looking at the HT Operations element in a Beacon frame. The HT Operations element is a part of the Beacon frame that contains information about the High Throughput (HT) capabilities and operation of an 802.11n BSS. The HT Operations element has a field called HT Protection, which indicates how the BSS protects its HT transmissions from interference or collisions with non-HT devices or BSSs. The HT Protection field can have four values: No Protection, Nonmember Protection, 20 MHz Protection, or Non-HT Mixed Mode. The other options are not correct, as they do not contain information about the HT protection mode. The HT Protection element does not exist, the ERP Information element is used for Extended Rate PHY (ERP) protection mode for 802.11g devices, and the HT Capabilities element is used for indicating the supported HT features of an individual device. References: [Wireless Analysis Professional Study Guide CWAP-404], Chapter 5: 802.11 MAC Sublayer, page 125-126
質問 # 125
When performing protocol analysis, you notice a high number of RTS/CTS frames being transmitted on an HT network. You suspect this may be due to HT protection mechanisms. Where in the Beacon frame would you look to determine which one of the four HT protection modes the AP is operating in?
- A. HT Operation Element
- B. HT Protection Element
- C. HT Information Element
- D. Non-HT Present Element
正解：C
解説：
Explanation
When performing protocol analysis, you would look at the HT Information Element in the Beacon frame to determine which one of the four HT protection modes the AP is operating in. The HT Information Element contains various subfields that provide information about the HT network configuration and operation. One of these subfields is the HT Protection field, which indicates whether any protection mechanisms are required for mixed-mode operation with non-HT STAs. The four possible values for this field are:
No Protection: No protection mechanisms are required.
Non-member Protection: RTS/CTS or CTS-to-self protection is required for all HT transmissions.
20 MHz Protection: RTS/CTS or CTS-to-self protection is required for all HT transmissions using a 40 MHz channel.
Non-HT Mixed Mode: All HT transmissions must use a non-HT preamble and header . References:
CWAP-404 Certified Wireless Analysis Professional Study and Reference Guide, Chapter 11:
802.11n/ac/ax PHYsical Layer Frame Exchanges, page 378; CWAP-404 Certified Wireless Analysis Professional Study and Reference Guide, Chapter 11: 802.11n/ac/ax PHYsical Layer Frame Exchanges, page 379.
質問 # 126
In an HT WLAN in which a delayed Block Ack policy is set up, what should result when an ACK frame is not received by the originator in response to a Basic BlockAckReq?
- A. The last frame within that block must be retransmitted by the originator.
- B. The BlockAckReq must be retransmitted by the originator.
- C. Nothing. No ACK is expected in response to a Basic BlockAckReq.
- D. All frames within that block must be retransmitted by the originator.
正解：B
質問 # 127
You require 802.11ac capture solution.
You want to capture using native operating system tools if possible.
What operating system has built-in ability to capture 802.11ac frames assuming it is running on the appropriate laptop hardware?
- A. Windows 10
- B. Windows 8.1
- C. Windows 7
- D. Mac OS X
正解：D
質問 # 128
Which parameters accurately describe the Beacon Interval field in the Beacon frame? (Choose 2)
- A. 4-octet length
- B. Indicates the desired time interval between TBTTs
- C. Measured in time units of 1024 ms
- D. Value can range from 0 to 2007
- E. Indicates the exact time interval between Beacon transmissions
正解：B、C
質問 # 129
You are performing a multiple adapter channel aggregation capture to troubleshoot a VoIP roaming problem and would like to measure the roaming time from the last VoIP packet sent on the old AP's channel to the first VoIP packet sent on the new AP's channel. Which timing column in the packet view would measure this for you?
- A. Relative
- B. Roaming
- C. Absolute
- D. Delta
正解：B
解説：
The "Roaming" timing column specifically measures the time elapsed between the last packet on the old AP's channel and the first packet on the new AP's channel, providing valuable information about the roaming time in VoIP troubleshooting scenarios.
質問 # 130
What should the To DS and From DS flags be to set to in an Association Response frame?
- A. To DS = 0, From DS = 0
- B. To DS = 0, From DS = 1
- C. To DS = 1, From DS = 1
- D. To DS = 1, From DS = 0
正解：A
解説：
In an Association Response frame, both the To DS and From DS flags should be set to 0 because this frame is used for communication between a station and an access point (AP) in the same wireless local area network (WLAN), not involving the distribution system (DS).
質問 # 131
......
究極のガイドはCWAP-404最新時間限定！今すぐダウンロード！：https://www.goshiken.com/CWNP/CWAP-404-mondaishu.html
2025年最新のな厳密検証されたCWAP-404学習合格ガイドでベズトお試しセット：https://drive.google.com/open?id=1J4G9FGWZuoRqpILcNHPEV64F1oGZvunt