After performing a protocol analysis capture on channel 36 you are looking at the radio tap header of a data frame and notice the frame was transmitted at MCS 0 on one spatial stream. At what data rate was the PHY Header for this frame transmitted?
Answer(s): C
On channel 36 (5 GHz band), the PHY header is always transmitted using one of the basic OFDM rates to ensure all devices can decode it. For 802.11a/n/ac in 5 GHz, the PHY header is sent at 6 Mbps, regardless of the MCS rate used for the data portion of the frame.
What is used in the PHY header of 802.11ax transmissions to identify stations that are included in an OFDMA RU-based multi-user transmission?
Answer(s): A
In 802.11ax (Wi-Fi 6), the PHY header includes a Station ID (STA-ID) to identify which stations are assigned to specific Resource Units (RUs) during OFDMA multi-user transmissions. This allows multiple clients to be scheduled and coordinated efficiently at the PHY layer.
To what does the channel number displayed in the radio tap header refer?
Answer(s): B
The channel number shown in the radio tap header reflects the channel setting of the capture adapter at the time the frame was received. It indicates where the analyzer was listening, not necessarily the channel declared in the PHY header or used by the transmitting AP.
When the Protected bit in the Frame Control field of the MAC header is set to 0, it always indicates:
The Protected Frame bit in the Frame Control field indicates whether the frame body is encrypted. A value of 0 means the frame body is unencrypted, while a value of 1 means it is encrypted.
You are exploring the packet decode of an 802.11 data frame and notice the To DS and From DS bits of the Frame Control field are both set to 1. Assuming the frame does not have a CRC error, what can you conclude about this frame?
Answer(s): D
When both To DS and From DS bits are set to 1, it indicates a wireless distribution system (WDS) frame. These are used when frames are forwarded between infrastructure devices like APs in a mesh network or wireless bridge, not between clients and APs.
Which is not a valid interpretation for one of the 4 address fields in the MAC header?
The 802.11 MAC header can contain up to four addresses: source address (SA), transmitter address (TA), receiver address (RA), and destination address (DA). "Sender address" is not a defined field in the standard, making it invalid.
In an infrastructure network, which statement is true concerning the “Power Management” bit and “More Data” bit in the Frame Control field of the MAC header?
In an infrastructure WLAN, the client STA sets the Power Management bit to signal when it is entering or exiting power save mode. The AP sets the More Data bit to indicate that additional buffered frames are waiting for a client STA, allowing proper coordination of frame delivery.
Which one of the following protocol analyzer features do not make protocol trace files easier to read?
Packet slicing reduces the captured frame size to protect sensitive data but does not improve readability of the trace. Features like filtering, colorization, and naming nodes directly help analysts focus on relevant frames and understand communication patterns more easily.
Post your Comments and Discuss CWNP CWAP-405 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CWAP-405 content, but please register or login to continue.