Wireless Principles and Architecture

27 questions

All types27 Multiple choice15 Multiple select5 Matching7

A network administrator is installing an outdoor wireless point-to-point bridge between two campus buildings. The access point transmitter power is configured to $14\text{ dBm}$ , the coaxial cable connecting the access point to the antenna introduces $3\text{ dB}$ of attenuation, and the directional antenna has a gain of $16\text{ dBi}$ . What is the Effective Isotropic Radiated Power (EIRP) for this wireless installation?

27\text{ dBm}

33\text{ dBm}

11\text{ dBm}

1\text{ dBm}

Show answer & explanation

Answer: $27\text{ dBm}$

Answer

The Effective Isotropic Radiated Power (EIRP) is

27\text{ dBm}

The correct calculation for Effective Isotropic Radiated Power (EIRP) accounts for the total power output from the transmitter, minus any insertion losses along the transmission cable, plus the passive power gain provided by the antenna. Computing

14\text{ dBm} - 3\text{ dB} + 16\text{ dBi}

gives

27\text{ dBm}

Step-by-Step Solution

Identify the given radio frequency values

Transmitter Power (

P_{\text{tx}}

) =

14\text{ dBm}

, Cable Loss (

L_{\text{cable}}

) =

3\text{ dB}

, Antenna Gain (

G_{\text{antenna}}

) =

16\text{ dBi}

These parameters determine the total power radiated by the antenna in isotropic terms.

Apply the standard EIRP formula

\text{EIRP} = P_{\text{tx}} - L_{\text{cable}} + G_{\text{antenna}}

Cable attenuation reduces signal power before it reaches the antenna, while antenna gain focuses and boosts the radiated signal power.

Substitute the values into the formula and calculate

\text{EIRP} = 14\text{ dBm} - 3\text{ dB} + 16\text{ dBi} = 27\text{ dBm}

Combining the transmitter output, cable attenuation, and passive antenna gain yields the total effective radiated power.

Key Concept

Effective Isotropic Radiated Power (EIRP) Calculation

Question 2Question →

An enterprise network engineer is designing a wireless deployment using a Centralized Wireless LAN Controller (WLC) architecture based on the Split-MAC protocol structure. To ensure low latency for time-sensitive radio frequency operations, certain MAC layer operations must occur on the physical Access Point (AP). Which function is executed directly by the Lightweight Access Point (LAP) hardware rather than being handled by the Centralized WLC?

Transmission of beacon frames and immediate 802.11 layer acknowledgments

Client 802.1X EAP authentication state management and key exchange processing

Radio Resource Management (RRM) calculations for global channel allocation

Translation between 802.11 wireless frames and 802.3 Ethernet frames across all client traffic

Show answer & explanation

Answer: Transmission of beacon frames and immediate 802.11 layer acknowledgments

Answer

Transmission of beacon frames and immediate 802.11 layer acknowledgments

Under the Cisco Split-MAC architecture (CAPWAP model), functions are divided based on timing requirements. Real-time 802.11 MAC operations—such as sending beacon frames, responding to probe requests, handling frame acknowledgments (ACKs), and executing MAC-layer encryption/decryption—must occur directly on the Lightweight Access Point (LAP) hardware to satisfy strict 802.11 timing constraints.

Step-by-Step Solution

Analyze the Split-MAC architecture division of responsibilities between LAPs and WLCs.

Identify that functions requiring microsecond-level timing must be processed locally at the AP radio level.

CAPWAP tunnel latency to the WLC would introduce unacceptable delays for real-time RF MAC operations.

Categorize real-time MAC functions versus non-real-time control/management functions.

Beacon frame generation, probe responses, frame queuing/prioritization, and 802.11 layer ACK responses belong to real-time MAC functions performed by the LAP.

These tasks must occur immediately in response to RF signals.

Evaluate the management and control functions offloaded to the WLC.

802.1X/EAP authentication, association requests, RRM channel selection, and centralized 802.11 to 802.3 frame translation are handled by the controller.

Centralizing these non-real-time operations allows uniform policy enforcement and global RF optimization across the enterprise network.

Key Concept

Split-MAC Architecture Division of Responsibilities

Question 3Question →

An enterprise network engineer is deploying a centralized wireless architecture using Cisco Lightweight Access Points (LAPs) and a Wireless LAN Controller (WLC) configured for Split-MAC operation. Which function is performed locally by the Lightweight Access Point during normal operation?

Transmission of 802.11 beacon frames and handling of probe responses

Processing of 802.11 client association and reassociation requests

Execution of 802.1X EAP client authentication and security key management

Translation of 802.11 wireless frames into 802.3 Ethernet frames

Show answer & explanation

Answer: Transmission of 802.11 beacon frames and handling of probe responses

Answer

Transmission of 802.11 beacon frames and handling of probe responses

Under Cisco's Split-MAC architecture, real-time 802.11 PHY and MAC functions—such as generating 802.11 beacon frames, responding to client probe requests, packet buffering for power-save mode, and layer 1/2 frame acknowledgments—are handled directly by the Lightweight Access Point (LAP). Because these operations demand tight, real-time execution, processing them locally prevents latency issues that would occur if traffic had to travel back and forth over a CAPWAP tunnel to the WLC.

Step-by-Step Solution

Analyze the Split-MAC architecture model used in Cisco centralized wireless networks.

Identify that functions are split between real-time MAC functions (AP) and management/non-real-time MAC functions (WLC).

Split-MAC optimizes processing by keeping delay-sensitive RF tasks on the AP while centralizing policy and control on the WLC.

Categorize the AP responsibilities under real-time MAC operations.

Real-time MAC tasks include sending 802.11 beacons, responding to probe requests, frame handshakes (ACKs), and packet buffering for power-save clients.

These tasks require microsecond-level timing and cannot tolerate latency introduced by traversing a CAPWAP tunnel to the controller.

Categorize WLC responsibilities under management and security functions.

Non-real-time functions include 802.11 authentication/association, 802.1X/EAP processing, security key distribution, and 802.11-to-802.3 frame conversion.

These functions control network access policies and data forwarding centrally.

Key Concept

Split-MAC Architecture Division of Responsibilities

Estimated Time:1m 0s

Question 4Question →

An enterprise network deployment uses Cisco Lightweight Access Points (LAPs) operating in a Centralized Split-MAC architecture managed by a Wireless LAN Controller (WLC). During high-density traffic analysis, an engineer must verify which frame processing tasks are handled locally by the AP in real time to minimize latency. Which function is executed directly by the Lightweight AP rather than being processed by the Wireless LAN Controller?

Transmission of 802.11 beacon frames and processing of real-time 802.11 frame acknowledgments

Management of client 802.1X/EAP authentication state machines and key handshake management

Processing of client association and reassociation requests across the broadcast domain

Dynamic Radio Resource Management (RRM) calculations for channel and power assignment

Show answer & explanation

Answer: Transmission of 802.11 beacon frames and processing of real-time 802.11 frame acknowledgments

Answer

Transmission of 802.11 beacon frames and processing of real-time 802.11 frame acknowledgments

Under Cisco Split-MAC architecture, time-sensitive (real-time) 802.11 protocol functions are executed directly on the Lightweight Access Point. These include beacon transmission, probe responses, MAC-level frame acknowledgments (ACKs), frame buffering/queuing, and signal strength measurements.

Step-by-Step Solution

Analyze the Split-MAC architecture division of responsibilities in Cisco centralized wireless networks.

Split-MAC divides 802.11 protocol handling between real-time MAC functions and management/non-real-time MAC functions.

Real-time functions must react within microsecond thresholds directly on the AP radio hardware.

Identify AP-specific real-time MAC functions.

The AP performs beacon generation, probe responses, 802.11 MAC layer acknowledgments (ACK), frame buffering, and Layer 1/2 encryption/decryption.

Sending real-time ACKs or beacons back and forth across a CAPWAP tunnel to a WLC would introduce intolerable latency.

Identify WLC-specific management functions.

The WLC manages 802.11 authentication, association/reassociation processing, 802.1X/EAP key handshakes, RRM, and CAPWAP tunnel termination.

Centralizing management policy ensures seamless mobility, central security control, and global RF optimization.

Key Concept

Split-MAC Architecture Division of Responsibilities

Question 5Question →

Match each wireless radio frequency (RF) propagation behavior on the left with its corresponding physical effect on Wi-Fi signals on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Absorption pairs with RF energy being converted to heat through dense materials; Reflection pairs with the signal bouncing off large flat conductive surfaces; Refraction pairs with signal bending through medium density changes; Scattering pairs with signal dispersion across rough or small obstacles.

Absorption describes energy loss in dense obstacles, Reflection describes signals bouncing off smooth metal surfaces, Refraction describes signal bending through media density changes, and Scattering describes multi-directional dispersion off irregular surfaces.

Step-by-Step Solution

Identify the mechanism of signal attenuation caused by solid building materials.

Absorption is the physical conversion of RF energy into heat as it penetrates dense obstacles.

Materials like concrete and brick absorb RF energy.

Identify the behavior when RF encounters large flat metallic objects.

Reflection is the bouncing back of an RF wave from a large conductive boundary.

Smooth metallic surfaces act as reflectors for wireless signals.

Identify the behavior associated with signal bending.

Refraction is the deflection of an RF wave passing through media of varying density.

Changes in medium propagation speed cause the wave vector to change direction.

Identify the behavior when signals hit small or non-uniform objects.

Scattering causes multi-directional redirection of RF energy.

Irregular boundaries prevent cohesive specular reflection.

Key Concept

RF Propagation Behaviors in Wireless Networks

Question 6Question →

A company operates several branch offices connected to a main data center where a centralized Wireless LAN Controller (WLC) resides. Following a WAN link outage at one branch, local wireless users at that site can still access local printers and file servers, even though their CAPWAP control connection to the WLC is temporarily down. Which operational mode must be configured on the branch lightweight access points (LAPs) to support local data switching when WLC reachability is lost?

FlexConnect mode

Local mode

Monitor mode

Sniffer mode

Show answer & explanation

Answer: FlexConnect mode

Answer

FlexConnect mode

FlexConnect mode allows lightweight access points deployed at remote branch sites to locally switch user traffic onto the local VLAN without sending it across the CAPWAP data tunnel to the centralized controller. When the WAN link fails and controller reachability is lost, FlexConnect APs can operate in standalone mode, preserving local client connectivity.

Step-by-Step Solution

Analyze the operational requirements of the branch office deployment

The branch access points must maintain local client traffic forwarding even when the WAN connection to the centralized Wireless LAN Controller fails.

Centralized WLC architectures typically tunnel all client data to the controller via CAPWAP, creating a dependency on WAN availability unless a localized switching mode is enabled.

Evaluate Cisco Lightweight Access Point (LAP) operational modes

FlexConnect mode (formerly known as HREAP) is specifically designed for remote branch deployments to allow local traffic switching at the AP level when the CAPWAP control tunnel to the centralized WLC drops.

In Local mode, an AP drops client associations if controller connection fails because all user data MUST pass through the CAPWAP tunnel.

Key Concept

Lightweight Access Point Operational Modes (FlexConnect vs Local)

Estimated Time:1m 15s

Question 7Question →

A network architect is designing a high-density Wi-Fi deployment across an enterprise facility with reinforced concrete walls and heavy multipath interference. During site survey planning, the architect must select between using 2.4 GHz channels ( $1$ , $6$ , $11$ ) and 5 GHz channels ( $36$ , $40$ , $44$ , $48$ ) for coverage while maintaining non-overlapping channel designs and minimizing free-space path loss and attenuation. Which statement accurately reflects the physical radio frequency (RF) propagation characteristics and channel planning constraints between these two frequency bands in this scenario?

The 2.4 GHz band experiences lower attenuation through solid obstacles compared to 5 GHz, but offers fewer non-overlapping channels in the US regulatory domain, making high-density channel reuse more susceptible to co-channel interference.

The 5 GHz band provides higher free-space path loss resistance than 2.4 GHz due to its shorter wavelength, allowing 5 GHz signals to propagate further through reinforced concrete walls.

The 2.4 GHz band provides 12 contiguous non-overlapping 20 MHz channels without dynamic frequency selection (DFS), allowing denser access point placement without co-channel interference.

Channel bonding adjacent 2.4 GHz channels into a 40 MHz channel eliminates co-channel interference while preserving all three non-overlapping channels in high-density enterprise environments.

Show answer & explanation

Answer: The 2.4 GHz band experiences lower attenuation through solid obstacles compared to 5 GHz, but offers fewer non-overlapping channels in the US regulatory domain, making high-density channel reuse more susceptible to co-channel interference.

Answer

The 2.4 GHz frequency band operates at longer wavelengths than 5 GHz, resulting in lower attenuation when passing through solid barriers like reinforced concrete walls. However, because the 2.4 GHz ISM band only contains 3 non-overlapping 20 MHz channels (channels 1, 6, and 11 in standard regulatory domains), high-density deployments using 2.4 GHz quickly run out of channels, leading to co-channel interference.

Step-by-Step Solution

Analyze signal propagation and attenuation across frequency bands.

Lower frequencies (2.4 GHz) have longer wavelengths, resulting in lower free-space path loss and greater ability to penetrate physical obstacles such as concrete walls compared to higher frequencies (5 GHz).

RF signal attenuation increases as frequency increases.

Evaluate channel availability for co-channel interference mitigation.

2.4 GHz only has 3 non-overlapping 20 MHz channels (1, 6, 11) in North America, whereas 5 GHz provides many more non-overlapping channels.

High-density access point deployments require multiple non-overlapping channels to avoid co-channel interference.

Synthesize propagation characteristics and channel planning constraints.

2.4 GHz penetrates solid obstacles better, but its limited count of 3 non-overlapping channels severely restricts high-density channel reuse compared to 5 GHz.

Balancing coverage (attenuation) with capacity (channel availability) is a core wireless architecture decision.

Key Concept

RF Propagation and Channel Planning Differences Between 2.4 GHz and 5 GHz

Question 8Question →

A network engineer is auditing wireless performance metrics across an enterprise deployment. Match each wireless radio frequency (RF) metric or unit on the left to its corresponding definition on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

RSSI matches the relative measurement vendor index; Noise Floor matches the background RF energy measure; SNR matches the comparative decibel difference between signal and noise; dBm matches the absolute unit of power referenced to 1 milliwatt.

RSSI is a relative vendor index for received power, Noise Floor is the total ambient background RF energy, SNR represents the decibel difference between signal strength and noise floor, and dBm is an absolute unit of power referenced to 1 milliwatt.

Step-by-Step Solution

Differentiate absolute power measurements from relative indicators.

dBm is an absolute power value referenced to 1 milliwatt (

0\text{ dBm} = 1\text{ mW}

), while RSSI is a relative vendor-dependent index of signal strength.

Understanding absolute versus relative units prevents mistaking arbitrary scales for standardized power measurements.

Identify environmental RF characteristics.

The noise floor measures ambient background RF interference from natural and non-Wi-Fi sources.

Establishing the noise floor baseline is required for assessing overall RF channel quality.

Evaluate the signal quality calculation.

SNR calculates the difference between the received signal level and the noise floor (

\text{SNR} = \text{Signal Power} - \text{Noise Floor}

A higher SNR value directly correlates with higher data transmission rates and lower frame retry rates.

Key Concept

Wireless RF Measurement Metrics and Units

Question 9Question →

A network administrator is troubleshooting an issue where Lightweight Access Points (LAPs) across a WAN link are unable to form control tunnels with the central Wireless LAN Controller (WLC). ICMP reachability between the LAPs and the WLC is verified, but CAPWAP tunnel negotiation fails at the transport layer due to firewall filtering. Which transport protocol and destination port must be permitted on perimeter firewalls to allow CAPWAP control traffic to establish?

UDP port 5246

TCP port 5246

UDP port 5247

TCP port 5247

Show answer & explanation

Answer: UDP port 5246

Answer

UDP port 5246 is required for CAPWAP control traffic between Lightweight Access Points and the Wireless LAN Controller.

The Control and Provisioning of Wireless Access Points (CAPWAP) protocol uses UDP as its transport layer protocol. Specifically, CAPWAP Control messages operate over UDP port 5246 (secured via DTLS), enabling the LAP to join the WLC, receive configuration updates, and exchange management metrics. Permitting UDP port 5246 allows the control channel to initialize successfully.

Step-by-Step Solution

Identify the protocol used for Cisco Split-MAC architecture management plane communications.

Lightweight APs use the Control and Provisioning of Wireless Access Points (CAPWAP) protocol to communicate with the WLC.

CAPWAP establishes two distinct tunnels: a control tunnel for AP management/configuration and a data tunnel for encapsulated wireless client traffic.

Determine the transport protocol and port numbers assigned to CAPWAP control and data planes.

CAPWAP Control uses UDP port 5246 (secured with DTLS), while CAPWAP Data uses UDP port 5247.

UDP is chosen for lower overhead and real-time processing performance, relying on DTLS for control channel reliability and security.

Match the requirement in the scenario to the correct port.

To resolve the control tunnel initialization failure, UDP port 5246 must be allowed through the firewall.

Allowing UDP port 5246 ensures the LAP can perform CAPWAP discovery, join, and configuration state exchanges with the WLC.

Key Concept

CAPWAP Transport Layer Ports (Control vs Data)

Question 10Question →

A network engineer is troubleshooting severe wireless performance degradation in an enterprise cafeteria. Spectrum analysis reveals significant non-802.11 radio frequency (RF) interference originating from operating microwave ovens and legacy Bluetooth IoT sensors. Which modification to the wireless infrastructure will best mitigate this specific source of RF interference?

Migrate client data traffic to the 5 GHz radio band

Increase the transmit power level on the 2.4 GHz radios

Enable 40 MHz channel bonding across the 2.4 GHz channels

Reassign all access points to utilize non-overlapping 2.4 GHz channels 1, 6, and 11

Show answer & explanation

Answer: Migrate client data traffic to the 5 GHz radio band

Answer

Migrate client data traffic to the 5 GHz radio band

Migrating wireless traffic to the 5 GHz band provides an effective solution because 5 GHz operates in a separate radio frequency spectrum unaffected by 2.4 GHz consumer emissions such as microwave ovens, Bluetooth devices, and cordless phones.

Step-by-Step Solution

Identify the RF frequency spectrum shared by the interference sources.

Microwave ovens and Bluetooth devices radiate RF energy within the

2.4\text{ GHz}

ISM frequency band (

2.400\text{ GHz}

2.4835\text{ GHz}

Understanding the physical band limitations isolates the cause of non-802.11 interference.

Evaluate alternative frequency bands available in enterprise wireless deployments.

The

5\text{ GHz}

frequency band operates completely outside the

2.4\text{ GHz}

range and offers significantly more non-overlapping channels unaffected by microwave radiation or Bluetooth signals.

Shifting wireless traffic to

5\text{ GHz}

bypasses the polluted spectrum entirely.

Key Concept

RF Interference and Frequency Band Characteristics (2.4 GHz vs 5 GHz)

Question 11Question →

A network administrator is evaluating the division of responsibilities in a Cisco Split-MAC wireless architecture. Which two functions are performed directly by the Lightweight Access Point (LAP) in real time? (Select two.)

Select all that apply

Transmitting 802.11 beacon and probe response frames

Executing real-time 802.11 frame encryption and decryption

Processing 802.1X/EAP client authentication requests

Calculating dynamic channel and power allocations using Radio Resource Management

Translating 802.11 wireless frames to 802.3 Ethernet frames in local mode

Show answer & explanation

Answer: Transmitting 802.11 beacon and probe response frames; Executing real-time 802.11 frame encryption and decryption

Answer

The two functions performed directly by the Lightweight Access Point are transmitting 802.11 beacon and probe response frames, and executing real-time 802.11 frame encryption and decryption.

In Cisco Split-MAC architecture, time-sensitive real-time tasks are performed directly by the Lightweight Access Point (LAP). These include transmitting 802.11 beacons, responding to probe requests, and performing hardware encryption/decryption of RF frames. Management, authentication, and global radio management are handled centrally by the WLC.

Step-by-Step Solution

Analyze Split-MAC architecture roles

Split-MAC divides 802.11 protocol handling between real-time tasks (LAP) and management/control tasks (WLC).

Real-time functions require immediate RF handling and low latency.

Identify LAP real-time tasks

Beacon generation, probe responses, packet buffering, and MAC layer encryption/decryption are handled by the LAP.

These operations must occur instantaneously at the physical RF boundary.

Identify WLC centralized management tasks

802.1X authentication, RRM channel/power calculations, and frame payload translation occur at the controller.

Centralizing management provides coordinated control and security enforcement across the wireless network.

Key Concept

Cisco Split-MAC Architecture Function Division

Question 12Question →

An enterprise wireless administrator is selecting appropriate antenna types for various deployment scenarios across a corporate campus. Match each wireless antenna type on the left with its primary operational characteristic and recommended deployment scenario on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Omnidirectional dipole antenna matches 360-degree horizontal coverage for open office environments; Patch directional antenna matches broad directional hemispherical pattern for wall mounting along corridors; Yagi directional antenna matches moderate gain focused beamwidth for short-to-medium outdoor bridges; Parabolic dish antenna matches extremely high gain tight beamwidth for long-distance point-to-point links.

Each antenna type is accurately paired with its corresponding radiation pattern, beamwidth, gain characteristic, and recommended deployment application.

Step-by-Step Solution

Analyze indoor open-space coverage requirements versus corridor coverage requirements.

Omnidirectional dipole antennas radiate 360 degrees horizontally for open spaces, whereas patch antennas direct RF energy forward in a hemispherical pattern ideal for hallways.

Matching antenna radiation pattern to physical space geometry prevents unnecessary RF bleed and signal degradation.

Evaluate outdoor point-to-point wireless bridging requirements based on distance and gain requirements.

Yagi antennas provide moderate gain for short-to-medium building links, while parabolic dish antennas provide high gain and narrow beamwidth for long-distance links.

Long-distance outdoor links require maximum directional gain to overcome free space path loss.

Key Concept

Wireless Antenna Types and RF Radiation Characteristics

Question 13Question →

Under the Cisco Split-MAC architecture, a Lightweight Access Point (LAP) operates in Local mode. Which task is handled directly by the access point rather than being offloaded to the Wireless LAN Controller (WLC)?

Transmitting 802.11 beacon frames and responding to probe requests

Processing 802.1X client authentication and association requests

Managing inter-controller client roaming and mobility state

Translating 802.11 wireless frames to 802.3 Ethernet frames for centralized data traffic

Show answer & explanation

Answer: Transmitting 802.11 beacon frames and responding to probe requests

Answer

Transmitting 802.11 beacon frames and responding to probe requests is performed locally by the Lightweight Access Point.

Transmitting 802.11 beacon frames and responding to probe requests are time-sensitive real-time MAC functions handled locally by the access point hardware in Split-MAC architecture.

Step-by-Step Solution

Identify the role of Split-MAC architecture

Split-MAC divides 802.11 protocol functions between real-time MAC functions on the AP and management MAC functions on the WLC.

Real-time duties requiring immediate time-sensitive transmission are assigned directly to the AP hardware.

Differentiate AP duties from WLC duties

Beacons, probe responses, and frame acknowledgment occur on the AP, whereas authentication, association, and frame bridging occur on the WLC.

This allows central management of security and policy while offloading high-frequency time-critical RF duties to the AP.

Key Concept

Split-MAC Architecture and Real-Time vs Management MAC Duties

Question 14Question →

An enterprise network administrator is deploying Cisco Lightweight Access Points (LAPs) across various branch offices and corporate facilities. Match each Cisco AP operational mode on the left with its correct functional description on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Monitor Mode pairs with the description detailing dedicated RF scanning for rogues, CleanAir, and IDS without client associations. Sniffer Mode pairs with capturing raw 802.11 frames on a specified channel for forwarding to a packet analyzer. Rogue Detector Mode pairs with listening to wired ARP traffic to correlate MAC addresses against rogue lists. FlexConnect Mode pairs with local traffic switching for remote branch APs.

Each access point operational mode serves a targeted operational purpose within Cisco wireless architecture: Monitor mode focuses purely on RF scanning and security metrics without serving clients; Sniffer mode performs targeted 802.11 packet capture; Rogue Detector operates on the wired network to validate rogue device connections; and FlexConnect facilitates local switching for remote site deployment efficiency.

Step-by-Step Solution

Analyze non-client-serving specialized scanning modes

Identify that Monitor mode dedicates its radios to RF environment scanning, CleanAir, and security detection without accepting client connections.

Monitor mode APs do not transmit SSIDs or process client associations.

Differentiate packet capture functionality

Map Sniffer mode to over-the-air packet capture sent directly to an external analyzer tool.

Sniffer mode requires setting a target channel and destination IP address for packet stream monitoring.

Identify wired-side rogue mitigation roles

Associate Rogue Detector mode with monitoring wired ARP broadcasts.

Rogue Detector APs turn off their wireless radios and connect directly to switch trunk ports to monitor layer 2 broadcasts.

Evaluate branch architecture survivability mode

Match FlexConnect mode with local data switching capabilities.

FlexConnect allows client traffic to bypass the CAPWAP data tunnel across the WAN while maintaining central controller management.

Key Concept

Cisco Lightweight Access Point Operational Modes

Question 15Question →

In a Cisco Wireless LAN Controller (WLC) architecture, Access Points (APs) can be configured in distinct operational modes to fulfill specialized roles. Match each AP operational mode on the left with its corresponding functional behavior on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Monitor Mode matches dedicated WIPS scanning and location tracking without client servicing; FlexConnect Mode matches local traffic switching and WAN fault tolerance for branch sites; Sniffer Mode matches raw 802.11 frame capture streaming for packet analysis; Rogue Detector Mode matches correlating airborne rogue MACs with wired infrastructure tables.

Each access point operational mode is matched directly to its primary role: Monitor mode provides non-client-serving WIPS scanning and location tracking; FlexConnect mode provides branch-office WAN fault tolerance and local traffic bridging; Sniffer mode provides remote 802.11 raw packet capture to a workstation; Rogue Detector mode links wireless rogue observations to wired network MAC tables.

Step-by-Step Solution

Identify the primary function of Monitor Mode.

Monitor mode APs refrain from serving wireless clients and focus exclusively on security scanning, rogue detection, and location tracking.

Monitor mode is tailored for continuous over-the-air environmental sensing.

Determine the operational characteristics of FlexConnect Mode.

FlexConnect allows local bridging of client traffic and local authentication fallback during WAN disruptions.

FlexConnect optimizes branch office deployments by preventing client data from requiring central CAPWAP encapsulation over limited WAN bandwidth.

Examine Sniffer Mode functionality.

Sniffer mode functions as a remote wireless packet probe, redirecting channel frame captures to a Wireshark workstation.

This allows deep-packet inspection on targeted RF channels without requiring specialized physical sniffer hardware on site.

Analyze Rogue Detector Mode.

Rogue Detector mode checks whether a rogue wireless device seen over the air is physically connected to the internal wired switch network.

It compares learned wired layer-2 MAC address tables with over-the-air rogue MAC lists.

Key Concept

Cisco Access Point Operational Modes

Estimated Time:2m 0s

Question 16Question →

During a wireless site survey in a multi-story office building, a network engineer observes that 2.4 GHz signals penetrate drywall and cubicle partitions with significantly less attenuation than 5 GHz signals, resulting in severe co-channel interference (CCI) from access points located on adjacent floors using channel 6. Which radio frequency (RF) principle explains why the 2.4 GHz frequency band exhibits greater obstacle penetration and longer range than the 5 GHz frequency band?

Lower frequency RF waves have longer wavelengths, which experience less attenuation when passing through solid physical barriers compared to higher frequency waves.

Higher frequency RF waves suffer less free-space path loss (FSPL), causing 5 GHz signals to reflect off walls rather than pass through them.

2.4 GHz channels automatically double their transmission amplitude when detecting co-channel interference to override adjacent floor access points.

The 5 GHz spectrum uses wider channel bonding by default, which physically prevents signals from traversing indoor partitions.

Show answer & explanation

Answer: Lower frequency RF waves have longer wavelengths, which experience less attenuation when passing through solid physical barriers compared to higher frequency waves.

Answer

Lower frequency RF waves have longer wavelengths, which experience less attenuation when passing through solid physical barriers compared to higher frequency waves.

The 2.4 GHz band operates at a lower frequency than the 5 GHz band, giving it a longer wavelength. Longer wavelengths attenuate less when passing through physical obstacles such as walls and floors, enabling the signal to travel greater distances through building structures and leading to co-channel interference if floor-to-floor channel separation is not properly managed.

Step-by-Step Solution

Analyze the physical relationship between RF wave frequency, wavelength, and attenuation.

Frequency (

f

) and wavelength (

\lambda

) are inversely proportional (

c = f \cdot \lambda

). Lower frequencies have longer wavelengths.

Understanding fundamental wave properties clarifies signal propagation characteristics.

Evaluate propagation behavior through physical barriers.

Longer wavelengths (2.4 GHz) pass through materials like drywall and wood with lower attenuation compared to shorter wavelengths (5 GHz).

Shorter wavelengths are more easily absorbed and scattered by physical structures.

Correlate RF behavior to the observed network issue.

The lower attenuation of 2.4 GHz signals allows them to travel farther through floors and walls, causing unintended co-channel interference across adjacent floors.

This explains why careful channel and power planning is essential in 2.4 GHz deployments.

Key Concept

RF Attenuation and Wavelength vs. Frequency Principles

Question 17Question →

When designing an enterprise Wi-Fi deployment, a network technician must decide between utilizing the 2.4 GHz and 5 GHz radio frequency bands. Which characteristic represents an advantage of using the 2.4 GHz band compared to the 5 GHz band?

Longer propagation distance and superior signal penetration through physical barriers

A significantly larger pool of non-overlapping channels to eliminate co-channel interference

Higher overall data throughput capacity resulting from standard wider channel bonding

Lower susceptibility to interference caused by common household and industrial devices

Show answer & explanation

Answer: Longer propagation distance and superior signal penetration through physical barriers

Answer

The 2.4 GHz band provides longer propagation distance and superior signal penetration through physical barriers.

Lower frequency radio waves (2.4 GHz) have longer wavelengths. This physical property allows 2.4 GHz wireless signals to cover greater distances and pass through solid obstructions (such as drywall, wood, and concrete) with less signal loss compared to higher frequency 5 GHz waves.

Step-by-Step Solution

Analyze RF wave propagation characteristics

Lower RF frequencies have longer wavelengths, which travel further and experience less attenuation through solid objects.

RF physics dictates an inverse relationship between frequency and wave propagation distance.

Compare 2.4 GHz and 5 GHz characteristics

2.4 GHz signals travel longer distances and penetrate walls better, while 5 GHz signals provide higher speed over shorter distances.

Lower frequency (2.4 GHz) trades raw speed and channel availability for increased coverage area.

Key Concept

Wireless Frequency Bands and RF Propagation Characteristics

Question 18Question →

An enterprise deployment uses Cisco Lightweight Access Points (LAPs) operating in a Centralized Split-MAC architecture with a central Wireless LAN Controller (WLC). Which two real-time MAC layer functions are performed directly by the Access Point rather than the WLC? (Select TWO.)

Select all that apply

Transmission of 802.11 beacon and probe response frames

Real-time 802.11 frame encryption and decryption

Processing and management of client 802.11 association and reassociation requests

Translation of 802.11 wireless frames to 802.3 Ethernet frames for centralized network distribution

Coordination of inter-AP seamless mobility and client layer 2 roaming

Show answer & explanation

Answer: Transmission of 802.11 beacon and probe response frames; Real-time 802.11 frame encryption and decryption

Answer

In a Cisco Split-MAC architecture, the Access Point handles real-time frame transmission (beacons/probe responses) and hardware layer encryption/decryption, while management and control functions are handled by the WLC.

In a Split-MAC architecture, real-time RF tasks that demand precise timing (such as generating 802.11 beacons, responding to probe requests, and performing hardware-level frame encryption/decryption) are processed directly by the AP hardware.

Step-by-Step Solution

Analyze the functional division in Cisco Split-MAC architecture

Split-MAC divides duties based on real-time sensitivity vs. centralized management.

Tasks requiring microsecond-level timing are offloaded to the AP radio hardware.

Identify AP real-time MAC functions

Beacon generation, probe responses, MAC-layer frame buffering, and hardware encryption/decryption are AP duties.

Latency-sensitive radio tasks cannot tolerate the round-trip delay of a CAPWAP tunnel to the controller.

Identify central WLC management functions

Client authentication/association, 802.11 to 802.3 frame translation, and roaming coordination belong to the WLC.

Centralizing management ensures consistent policy enforcement and seamless mobility.

Key Concept

Split-MAC Architecture Division of Responsibilities

Question 19Question →

An enterprise network administrator is deploying a centralized Cisco Wireless LAN Controller (WLC) architecture utilizing CAPWAP tunnels for Lightweight Access Point (LAP) management and traffic transport. Which two statements correctly describe the transport layer protocols and security characteristics used by CAPWAP? (Choose two.)

Select all that apply

CAPWAP Control traffic uses UDP port 5246 and is encrypted by default using Datagram Transport Layer Security (DTLS).

CAPWAP Data traffic uses UDP port 5247 and is unencrypted by default, though optional DTLS payload encryption can be enabled.

CAPWAP Control traffic uses TCP port 5246 to guarantee connection-oriented reliable delivery of management frames without encryption.

CAPWAP Data traffic uses TCP port 5247 to prevent packet loss for real-time wireless voice and video application traffic.

CAPWAP Control and Data tunnels are multiplexed over a single IPsec VPN tunnel established on UDP port 500.

Show answer & explanation

Answer: CAPWAP Control traffic uses UDP port 5246 and is encrypted by default using Datagram Transport Layer Security (DTLS).; CAPWAP Data traffic uses UDP port 5247 and is unencrypted by default, though optional DTLS payload encryption can be enabled.

Answer

The correct statements are that CAPWAP Control traffic operates over UDP port 5246 with mandatory DTLS encryption, while CAPWAP Data traffic operates over UDP port 5247 and is unencrypted by default (with optional DTLS encryption support).

CAPWAP (Control and Provisioning of Wireless Access Points) protocol specifies UDP port 5246 for Control messages, which are encrypted using DTLS by default to secure WLC-to-AP management traffic. CAPWAP Data frames are transported over UDP port 5247, which defaults to unencrypted operational state to maximize throughput, while allowing optional DTLS payload encryption.

Step-by-Step Solution

Analyze CAPWAP transport protocol selection.

CAPWAP uses UDP (User Datagram Protocol) rather than TCP for both Control and Data channels to eliminate head-of-line blocking and TCP sliding-window overhead over wireless medium links.

Lightweight access points and controllers handle reliability through CAPWAP retransmission timers and DTLS instead of TCP transport features.

Identify CAPWAP port assignments for Control and Data planes.

Control traffic communicates over UDP port 5246, while Data traffic communicates over UDP port 5247.

Separating Control and Data onto distinct UDP destination ports allows routers and firewalls to apply targeted QoS and security policies.

Evaluate encryption requirements for CAPWAP channels.

CAPWAP Control traffic requires DTLS encryption by default to safeguard configuration and management exchanges. CAPWAP Data traffic travels unencrypted by default to preserve throughput, though DTLS can be enabled if desired.

Default unencrypted data tunneling avoids severe performance penalties on hardware while protecting controller management transactions.

Key Concept

CAPWAP Protocol Architecture and UDP Port Operations

Question 20Question →

Which TWO 802.11 frame sub-types are categorized as Management frames in a Wi-Fi network? (Select TWO.)

Select all that apply

Beacon

Authentication

Request to Send (RTS)

Acknowledgement (ACK)

Clear to Send (CTS)

Show answer & explanation

Answer: Beacon; Authentication

Answer

Beacon and Authentication frames are classified as 802.11 Management frames.

Beacon and Authentication frames are 802.11 Management frames. Beacon frames broadcast BSSID and network capabilities to discovery clients, while Authentication frames initiate client joining procedures.

Step-by-Step Solution

Categorize 802.11 frame types into Management, Control, and Data.

Management frames handle join/leave functions (Beacon, Probe, Authentication, Association). Control frames assist in data delivery (RTS, CTS, ACK).

802.11 defines three primary frame classes to govern media access and network membership.

Identify the Management frames from the listed options.

Beacon and Authentication are Management frames, whereas RTS, CTS, and ACK are Control frames.

Beacon frames advertise WLAN parameters, while Authentication frames handle client access validation.

Key Concept

802.11 Wireless Frame Types (Management vs Control vs Data)

Page 1 / 2Next

Wireless Principles and Architecture

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept