Free 365 Days Exam Updates CWNA-108 dumps with test Engine Practice
Updated Verified CWNA-108 dumps Q&As - 100% Pass Guaranteed
The CWNA-108 exam is a multiple-choice exam and consists of 60 questions that must be completed within 90 minutes. CWNA-108 exam is administered by Pearson VUE, a leading provider of technology-based testing and assessment services, and can be taken at any of their authorized testing centers around the world.
NEW QUESTION # 34
ABC Company is planning a point-to-multipoint outdoor bridge deployment with standalone (autonomous) 802.11 bridge units. 802.1X/EAP will be used for bridge authentication. A Linux- based RADIUS server will be used for authentication. What device in the bridge Implementation as the 802.1X Authenticator?
- A. The Ethernet switch
- B. The root bridge
- C. The RADIUS server
- D. All non-root bridges
Answer: A
NEW QUESTION # 35
Lynne runs a small hotel, and as a value added service for his customers he has implemented a Wi-Fi hot-spot.
Lynne has read news articles about how hackers wait at hot-spots trying to take advantage of unsuspecting users. He wants to avoid this problem at his hotel.
What is an efficient and practical step that Lynne can take to decrease the likelihood of active attacks on his customers' wireless computers?
- A. Implement Network Access Control (NAC) and require antivirus and firewall software along with OS patches.
- B. Require EAP-FAST authentication and provide customers with a username/password on their receipt.
- C. Enable station-to-station traffic blocking by the access points in the hotel.
- D. Implement an SSL VPN in the WLAN controller that initiates after HTTPS login.
Answer: C
Explanation:
Explanation
Station-to-station traffic blocking is a security feature that prevents wireless clients from communicating with each other on the same network. This can prevent active attacks such as man-in-the-middle, ARP spoofing, or denial-of-service that hackers may launch from their devices against other users in a public Wi-Fi hotspot. By enabling station-to-station traffic blocking by the access points in the hotel, Lynne can decrease the likelihood of such attacks on his customers' wireless computers. This feature can be configured on most wireless APs or controllers345. References: CWNA-109 Study Guide, Chapter 10: Wireless LAN Security, page
427; CWNA-108 Study Guide, Chapter 10: Wireless LAN Security, page 417; Wireless Station-to-Station Traffic Being Blocked.
NEW QUESTION # 36
You must plan for POE in an office environment. Which one of these devices is least likely to be a POE PSE?
- A. Switch
- B. VolP Phone
- C. Midspan multi-port injector
- D. Midspan injector
Answer: B
Explanation:
Explanation
A VoIP phone is least likely to be a POE PSE of the devices listed. POE stands for Power over Ethernet, which is a technology that allows devices to receive both power and data over a single Ethernet cable. A POE PSE stands for Power Sourcing Equipment, which is a device that provides power to other devices over Ethernet. A POE PD stands for Powered Device, which is a device that receives power from a PSE over Ethernet. A midspan multi-port injector, a switch, and a midspan injector are examples of POE PSEs, as they can supply power to multiple devices over Ethernet cables. A VoIP phone is an example of a POE PD, as it can receive power from a PSE over an Ethernet cable. However, some VoIP phones can also act as POE PSEs for other devices, such as IP cameras or wireless access points, but this is not very common. References: CWNA-109 Study Guide, Chapter 8: Wireless LAN Access Points, page 2411
NEW QUESTION # 37
In a Wi-Fi client configuration utility, what feature is most likely to be user configurable?
- A. 802.1p to WMM mappings
- B. EAP Authentication Type
- C. RADIUS Server IP Address
- D. WMM-PS Dozing Interval
- E. SNMPv3 Users
Answer: B
NEW QUESTION # 38
What security solution is deprecated in the 802.11 standard and should never be used in any modern WLAN deployment?
- A. CCMP
- B. Shared Key Authentication
- C. AES
- D. Open System Authentication
Answer: B
Explanation:
Explanation
Shared Key Authentication is a security solution that was defined in the original 802.11 standard as an alternative to Open System Authentication, which does not provide any security at all. Shared Key Authentication uses WEP (Wired Equivalent Privacy) to encrypt and authenticate data frames between the client station and the AP. However, WEP has been proven to be extremely vulnerable to various attacks that can easily crack the encryption key and compromise the network security. Therefore, Shared Key Authentication is deprecated in the 802.11 standard and should never be used in any modern WLAN deployment . References: [CWNA-109 Study Guide], Chapter 10: Wireless LAN Security, page 401;
[CWNA-108 Study Guide], Chapter 10: Wireless LAN Security, page 391; [Wikipedia], Wired Equivalent Privacy.
NEW QUESTION # 39
A WLAN is implemented using wireless controllers. The APs must locate the controllers when powered on and connected to the network. Which one of the following methods is commonly used to locate the controllers by the APs?
- A. NTP
- B. SNMP
- C. DHCP
- D. GRE
Answer: C
Explanation:
Explanation
DHCP (Dynamic Host Configuration Protocol) is a commonly used method to locate the controllers by the APs in a WLAN that is implemented using wireless controllers. DHCP is a protocol that allows a device to obtain an IP address and other network configuration parameters from a server. In a wireless controller scenario, the APs can use DHCP to request an IP address from a DHCP server, which can also provide the IP address or hostname of the wireless controller as an option in the DHCP response. This way, the APs can discover the wireless controller and establish a connection with it. Alternatively, the APs can also use other methods to locate the wireless controller, such as DNS (Domain Name System), broadcast or multicast discovery, or manual configuration. References: 1, Chapter 8, page 309; 2, Section 5.2
NEW QUESTION # 40
What primary metric of scanning can stations use to select the best AP for connectivity to the desired BSS?
- A. FCS errors in frames transmitted to and from the AP.
- B. Throughput speed in Mbps.
- C. Signal strength of AP beacons received.
- D. PING latency when testing against an Internet server.
Answer: C
NEW QUESTION # 41
The BSA of an AP covers the area used by the sales and marketing department. Thirty-five stations operate in this space. The users indicate that they need more throughput and all stations are 5 GHz capable 802.11ac clients. The current AP configuration uses 20 MHz channels in both 2.4 GHz and 5 GHz. What is the least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended?
- A. Use a 160 MHz channel on the 5 GHz radio
- B. Use a 40 MHz channel on the 2.4 GHz radio
- C. Use a 40 MHz channel on the 5 GHz radio
- D. Install a second AP in the coverage area
Answer: C
Explanation:
Explanation
The least expensive solution available for increasing throughput for these users without implementing configuration options that are not recommended is to use a 40 MHz channel on the 5 GHz radio. This solution can double the channel bandwidth and increase the data rates for the 5 GHz capable 802.11ac clients. Using a
40 MHz channel on the 5 GHz radio is also less likely to cause co-channel interference or overlap with other channels than using a 40 MHz channel on the 2.4 GHz radio, which has only three non-overlapping channels.
Using a 160 MHz channel on the 5 GHz radio may provide even higher throughput, but it may also consume too much of the available spectrum and cause more interference with other devices or networks. Installing a second AP in the coverage area may also improve the throughput, but it may require additional costs and configuration. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-107], page 216; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-106], page 206.
NEW QUESTION # 42
What is always required to establish a high quality 2.4 GHz RF link at a distance of 3 miles (5 kilometers)?
- A. A minimum antenna gain of 11 dBi at both endpoints
- B. A Fresnel Zone that is at least 60% clear of obstructions
- C. Grid antennas at each endpoint
- D. Minimum output power level of 2 watts
Answer: B
NEW QUESTION # 43
What 802.11 PHY uses available space in very low frequency ranges that is not in use at the time by broadcast video signals?
- A. DSSS
- B. DMG
- C. SIG
- D. TVHT
Answer: A
Explanation:
https://www.cwnp.com/802-11ac-vht-just-the-facts/
NEW QUESTION # 44
An 802.11-based network uses an AP and has several connecting clients. The clients include iPhones, iPads, laptops and one desktop. What WLAN use case is represented?
- A. WPAN
- B. BSS
- C. Ad-hoc
- D. IBSS
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION # 45
ABC Company is planning a point-to-multipoint outdoor bridge deployment with standalone (autonomous)
802.11 bridge units. 802.1X/EAP will be used for bridge authentication. A Linux-based RADIUS server will be used for authentication. What device in the bridge implementation acts as the 802.1X Authenticator?
- A. The root bridge
- B. The RADIUS server
- C. The Ethernet switch
- D. All non-root bridges
Answer: A
NEW QUESTION # 46
What is required when operating 802.11ax APS in the 6 GHz band using passphrase-based authentication?
* VHT PHY
- A. HT PHY
- B. CCMP
- C. SAE
Answer: B
Explanation:
Explanation
SAE (Simultaneous Authentication of Equals) is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication. SAE is a secure and robust authentication method that is defined in the IEEE 802.11s amendment and is also known as WPA3-Personal or WPA3-SAE. SAE is based on a cryptographic technique called Dragonfly Key Exchange, which allows two parties to establish a shared secret key using a passphrase, without revealing the passphrase or the key to an eavesdropper or an attacker. SAE also provides forward secrecy, which means that if the passphrase or the key is compromised in the future, it does not affect the security of past communications.
SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because of the new regulations and standards that apply to this band. The 6 GHz band is a new frequency band that was opened for unlicensed use by the FCC and other regulatory bodies in 2020. The 6 GHz band offers more spectrum and less interference than the existing 2.4 GHz and 5 GHz bands, which can enable higher performance and efficiency for Wi-Fi devices. However, the 6 GHz band also has some restrictions and requirements that are different from the other bands, such as:
* The 6 GHz band is divided into two sub-bands: U-NII-5 (5925-6425 MHz) and U-NII-7 (6525-6875 MHz). The U-NII-5 sub-band is subject to DFS (Dynamic Frequency Selection) rules, which require Wi-Fi devices to monitor and avoid using channels that are occupied by radar systems or other primary users. The U-NII-7 sub-band is not subject to DFS rules, but it has a lower maximum transmit power limit than the U-NII-5 sub-band.
* The Wi-Fi devices that operate in the 6 GHz band are called 6E devices, which stands for Extended Spectrum. 6E devices must support 802.11ax technology, which is also known as Wi-Fi 6 or High Efficiency (HE). 802.11ax is a new standard that improves the performance and efficiency of Wi-Fi networks by using features such as OFDMA (Orthogonal Frequency Division Multiple Access), MU-MIMO (Multi-User Multiple Input Multiple Output), BSS Coloring, TWT (Target Wake Time), and HE PHY and MAC enhancements.
* The 6E devices that operate in the 6 GHz band must also support WPA3 security, which is a new security protocol that replaces WPA2 and provides stronger encryption and authentication for Wi-Fi networks. WPA3 has two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses SAE as its authentication method, which requires a passphrase to establish a secure connection between two devices. WPA3-Enterprise uses EAP (Extensible Authentication Protocol) as its authentication method, which requires a certificate or a credential to authenticate with a server.
Therefore, SAE is required when operating 802.11ax APs in the 6 GHz band using passphrase-based authentication because it is part of WPA3-Personal security, which is mandatory for 6E devices in this band.
References: , Chapter 3, page 120; , Section 3.2
9of30
NEW QUESTION # 47
When considering data rates available in HT and VHT PJY devices, in addition to the modulation, coding, channel width, and spatial streams, what impacts the data rate according to the MCS tables?
- A. The client drivers
- B. The guard interval
- C. The height of the antennas
- D. The Frequency band in use
Answer: B
NEW QUESTION # 48
A dual-band 802.11ac AP must be powered by PoE. As a class 4 device, what power level should be received at the AP?
- A. 12.95 W
- B. 15.4 W
- C. 30 W
- D. 25.5 W
Answer: D
Explanation:
Explanation
PoE has different standards that define different power levels for PSEs and PDs. The original standard, IEEE
802.3af, defines two classes of PSEs: Class 3 (15.4 W) and Class 4 (30 W). The newer standard, IEEE 802.3at, also known as PoE+, defines four classes of PSEs: Class 0 (15.4 W), Class 1 (4 W), Class 2 (7 W), and Class 3 (12.95 W). The power level received at the PD is always lower than the power level provided by the PSE, due to cable resistance and power dissipation. The IEEE standards specify the minimum power level that must be received at the PD for each class of PSE. For a Class 4 PSE, the minimum power level received at the PD is
25.5 W910. References: CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page
295; CWNA-108 Study Guide, Chapter 7: Power over Ethernet (PoE), page 289.
NEW QUESTION # 49
What frame type is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS?
- A. PS-Poll
- B. ACK
- C. RTS
- D. Beacon
Answer: C
Explanation:
Explanation
The frame type that is used to reserve the wireless medium for the transmission of high data rate frames that may not be understood by all clients connected to the BSS is RTS. RTS stands for Request to Send and is a control frame that is sent by a station to request access to the medium for a specified duration. The RTS frame contains the source and destination MAC addresses, as well as a Network Allocation Vector (NAV) value that indicates how long the medium will be occupied. The destination station responds with a Clear to Send (CTS) frame that echoes the NAV value and grants permission to the source station. All other stations in the BSS hear either the RTS or CTS frame and update their NAV timers accordingly, deferring their transmissions until the medium is free. The RTS/CTS mechanism can be used to prevent hidden node problems, reduce collisions, and protect high data rate frames that use features such as 802.11n or 802.11ac that may not be compatible with legacy stations. ACK, Beacon, and PS-Poll are not used to reserve the medium for high data rate frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-107], page 112; [CWNA: Certified Wireless Network Administrator Official Study Guide: Exam CWNA-106], page 102.
NEW QUESTION # 50
A client complains of low data rates on his computer. When you evaluate the situation, you see that the signal strength is -84 dBm and the noise floor is -96 dBm. The client is an 802.11ac client and connects to an
802.11ac AP. Both the client and AP are 2x2:2 devices. What is the likely cause of the low data rate issue?
- A. CAT5e cabling run to the AP
- B. Lack of support for 802.11n
- C. Too few spatial streams
- D. Weak signal strength
Answer: D
Explanation:
Explanation
Weak signal strength is the likely cause of the low data rate issue for the client that has a signal strength of -84 dBm and a noise floor of -96 dBm. The client is an 802.11ac client and connects to an 802.11ac AP. Both the client and AP are 2x2:2 devices. Signal strength is the measure of how strong the RF signal is at the receiver.
Signal strength can affect the reliability and performance of the wireless connection, as well as the data rate and throughput of the traffic. The higher the signal strength, the better the signal quality and the higher the data rate. The lower the signal strength, the worse the signal quality and the lower the data rate.
The data rate of an 802.11ac connection depends on several factors, such as channel bandwidth, modulation and coding scheme (MCS), spatial streams, guard interval, and beamforming. However, these factors are also influenced by the signal strength, as they require a certain signal-to-noise ratio (SNR) to operate properly.
SNR is the ratio of the signal strength to the noise floor, which is the measure of the background noise or interference in the RF environment. The higher the SNR, the more robust and efficient the communication.
The lower the SNR, the more prone and vulnerable to errors and retries.
According to the CWNA Official Study Guide , Table 3.7, page 112, an 802.11ac connection with a channel bandwidth of 80 MHz, an MCS of 9, two spatial streams, a short guard interval, and no beamforming can achieve a maximum data rate of 867 Mbps. However, this data rate requires a minimum SNR of 30 dB to maintain a sufficient signal quality. If the signal strength is -84 dBm and the noise floor is -96 dBm, then the SNR is only 12 dB (-84 dBm - (-96 dBm) = 12 dB), which is far below the required SNR for this data rate.
Therefore, the data rate will drop significantly to match the lower SNR and signal quality.
To solve this problem, the signal strength should be increased to improve the SNR and data rate. This can be done by adjusting the output power or channel assignment of the AP or client, relocating or reorienting some APs or antennas to reduce attenuation or interference, updating or replacing some faulty or outdated hardware or software components, etc. References: , Chapter 3, page 112; , Section 3.2
NEW QUESTION # 51
When compared with legacy Power Save mode, how does VHT TXOP power save improve battery life for devices on a WLAN?
- A. VHT TXOP power save allows the WLAN transceiver to disable more components when in a low power state.
- B. VHT TXOP power save uses the partial AID in the preamble to allow clients to identify frames targeted for them.
- C. VHT TXOP power save allows stations to enter sleep mode and legacy Power Save does not.
- D. Legacy Power Save mode was removed in the 802.11ac amendment.
Answer: B
Explanation:
Explanation
VHT TXOP power save uses the partial AID in the preamble to allow clients to identify frames targeted for them. VHT TXOP power save is a feature introduced in the 802.11ac amendment that improves battery life for devices on a WLAN by allowing them to enter sleep mode more frequently and for longer periods of time. It works by using a new field called partial AID in the preamble of VHT frames that indicates which stations are addressed by the frame. This allows stations to quickly determine if they need to wake up and receive the frame or stay in sleep mode and save power. This reduces the overhead and latency of legacy Power Save mode, which requires stations to wake up periodically and listen to Beacon frames or other control frames to check if there are any buffered frames for them at the AP. References: , Chapter 3, page 117; , Section 3.2
NEW QUESTION # 52
What is a channel mode specified by the 802.11n (High Throughput) PHY?
- A. 80 MHz
- B. Frequency Hopping
- C. 20/40 MHz
- D. 22 MHz
Answer: C
NEW QUESTION # 53
You are deploying a WLAN with the access points configured for 10 mW of output power on the 2.4 GHz radios and 20 mW of output power on the 5GHz radios. Some semi-directional antennas are also in use. What kind of deployment is described?
- A. Residential
- B. SOHO
- C. High density
- D. Standard office
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION # 54
What cause of hidden nodes within a BSS would be more likely lead to an increase in collisions and retries?
- A. Client stations broadcasting with too much power
- B. Large 802.11 cells with physically distributed stations
- C. Access pointsbroadcasting with too little power
- D. Data frames too large for the physical environment
Answer: C
NEW QUESTION # 55
What is the most effective method for testing roaming in relation to 802.11 VoIP handsets?
- A. Use a protocol analyzer to capture the traffic generated when a laptop roams.
- B. Use the built-in roaming monitor built into all VoIP handsets.
- C. Place a call with the handset and move around the facility to test quality during roaming.
- D. Use a spectrum analyzer to monitor RF activity during a VoIP call.
Answer: C
Explanation:
Explanation
The most effective method for testing roaming in relation to 802.11 VoIP handsets is to place a call with the handset and move around the facility to test quality during roaming. This method allows you to evaluate the actual performance and user experience of VoIP calls over wireless networks, as well as identify any potential issues such as signal strength, interference, latency, jitter, packet loss, or handoff delays. A spectrum analyzer can only show you the RF activity during a VoIP call, but not how it affects the voice quality or roaming behavior. A protocol analyzer can capture the traffic generated when a laptop roams, but it cannot simulate the characteristics of a VoIP handset such as battery life, antenna design, codec support, or QoS features. A built-in roaming monitor is not a common feature in all VoIP handsets, and it may not provide accurate or comprehensive information about the roaming process. References: [CWNP Certified Wireless Network Administrator Official Study Guide: Exam CWNA-107], page 487; [Voice over Wireless LAN 4.1 Design Guide], page 6-19.
NEW QUESTION # 56
What can an impedance mismatch in the RF cables and connectors cause?
- A. Fewer MCS values in the MCS table
- B. Increased amplitude of the RF signal
- C. Excessive VSWR
- D. Increased range of the RF signal
Answer: C
NEW QUESTION # 57
What is appended to the end of each 802.11 data frame after the payload?
- A. Preamble
- B. MAC header
- C. FCS
- D. PHY header
Answer: C
NEW QUESTION # 58
......
The CWNP CWNA-108 exam consists of 60 multiple-choice questions, and candidates have 90 minutes to complete it. The passing score for the exam is 70%, which means that candidates need to answer at least 42 questions correctly to pass. CWNA-108 exam is available in several languages, including English, Japanese, and Chinese.
CWNA-108 Exam Topics
The CWNP CWNA-108 test evaluates the candidates’ knowledge of the following subjects:
- Ensuring the highest security standards for wireless LAN;
- Handling antenna concepts;
- Management of 802.11 network architecture;
- Understanding how to manage Radio Frequency technologies;
- Being prepared for troubleshooting;
- Deployment of wireless organizations and standards;
- Handling all steps related to network management, installation, and design;
- Performing different types of site surveys.
Provide Valid Dumps To Help You Prepare For CWNP Certified Wireless Network Administrator Exam Exam: https://www.examtorrent.com/CWNA-108-valid-vce-dumps.html
CWNA-108 Dumps Questions [2024] Pass for Exam: https://drive.google.com/open?id=1N7ohBfS0gOge0iKLSwBfPKK1mcRq9CBv
