CWNA-109 Certified Wireless Network Administrator Question and Answers

 VSWR stands for Voltage Standing Wave Ratio, which is a measure of how well the impedance of the RF cable and connectors matches the impedance of the transmitter and the antenna. Impedance is the opposition to the flow of alternating current in an RF circuit, and it depends on the frequency, resistance, capacitance, and inductance of the components. A perfect impedance match would have a VSWR of 1:1, meaning that all the power is transferred from the transmitter to the antenna, and none is reflected back. However, in reality, there is always some degree of mismatch, which causes some power to be reflected back to the transmitter, creating standing waves along the cable. This reduces the efficiency and performance of the wireless system, and can also damage the transmitter. Excessive VSWR can be caused by using poor quality or damaged cables and connectors, or by using components that have different impedance ratings123. References: CWNA-109 Study Guide, Chapter 2: Radio Frequency Fundamentals, page 90; CWNA-109Study Guide, Chapter 2: Radio Frequency Fundamentals, page 86; CWNP website, CWNA Certification.

The two IEEE amendments that should be supported to provide the management frame protection and fast secure roaming security features are 802.11r and 802.11w12.

• 802.11r (Fast BSS Transition): This amendment to the IEEE 802.11 standard permits continuous connectivity aboard wireless devices in motion, with fast and secure client transitions from one Basic Service Set to another1.
• 802.11w (Management Frame Protection): This amendment increases the security of its management frames2.

FT (Fast Transition) is an IEEE 802.11 standard method for fast roaming. FT is defined in the IEEE 802.11r amendment and is also known as Fast BSS Transition (FBT) or Fast Secure Roaming. FT is a feature that allows a client station to quickly switch from one AP to another within the same ESS (Extended Service Set) without having to re-authenticate and re-associate with each AP. This reduces the latency and packet loss that may occur during roaming, thus improving the user experience and maintaining the security of the connection. FT works by using pre-authentication and key caching mechanisms that allow the client station and the APs to exchange security information before the actual roaming occurs. This way, when the client station decides to roam to a new AP, it can use a fast reassociation request and response that contain only a few fields, instead of a full authentication and association exchange that require more time and data. References: 1, Chapter 9, page 367; 2, Section 6.3

The client STA can use Beacon frames transmitted by the AP to verify that an AP supports the same data rates that it supports. Beacon frames are management frames that are periodically broadcasted by the APs to announce their presence, capabilities, and parameters. Oneof the information elements contained in the Beacon frames is the Supported Rates or Extended Supported Rates, which lists the data rates that the AP can use for communication. The client STA can compare its own data rates with those advertised by the AP to determine if they are compatible. Data frames, authentication frames, and probe request frames do not contain information about data rates. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 133; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 123.

S1G is one of the 802.11 PHYs that is more likely to be used in an industrial deployment but not likely to be used in standard office deployments. This is because S1G stands for Sub-1 GHz, which means it operates in the frequency bands below 1 GHz, such as 900 MHz and 868 MHz. These bands offer better penetration and range than the higher frequency bands used by other 802.11 PHYs, such as 2.4 GHz and 5 GHz. This makes S1G suitable for industrial applications that require robust and reliable wireless communication in harsh environments, such as factories, warehouses, mines, and smart grids. S1G also supports low-power and low-data-rate devices, such as sensors, actuators, and meters, which are common in industrial Internet of Things (IoT) scenarios. VHT, OFDM, and HT are other 802.11 PHYs that are more commonly used in standard office deployments, as they offer higher data rates and capacity than S1G, but have lower range and penetration. References: CWNA-109 Study Guide, Chapter 3: Radio Frequency Technologies, page 751

The final step in an effective troubleshooting process is to document the results. Documentation is essential for keeping track of the problem history, the actions taken, the solutions implemented, and the outcomes achieved. Documentation can also help to prevent future problems, improve best practices, and provide feedback for improvement. Documentation should include relevant information such as problem description, symptoms, root cause analysis, resolution steps, verification methods, and lessons learned. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 513; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 483.

VHT TXOP (Very High Throughput Transmit Opportunity) power save is a feature introduced with the 802.11ac amendment, which is designed to improve the power efficiency of devices connected to a WLAN. This feature enhances battery life in several ways, compared to the legacy Power Save mode:

• Enhanced Power Saving: VHT TXOP power save allows devices to disable more components of the WLAN transceiver when they are in a low power state. This reduces the power consumption during periods when the device is not actively transmitting or receiving data.
• Intelligent Wake-Up Mechanisms: It employs more sophisticated mechanisms for devices to determine when they need to wake up and listen to the channel, further reducing unnecessary power usage.
• Optimized Operation: This power save mode is optimized for the high-throughput environment of 802.11ac networks, allowing devices to efficiently manage power while maintaining high performance.

Legacy Power Save mode, introduced in earlier versions of the 802.11 standards, does not provide the same level of component disablement or the intelligent wake-up mechanisms found in VHT TXOP power save, making option B the correct answer.

References:

• IEEE 802.11ac-2013 Amendment: Enhancements for Very High Throughput for Operation in Bands below 6 GHz.
• CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.

Fade Margin is an additional pad of signal strength designed into the RF system to compensate for unpredictable signal fading. It is the difference between the receiver’s sensitivity and the actual received signal level. A higher Fade Margin indicates a more robust link that can withstand interference, attenuation, or other factors that may reduce the signal strength. A lower Fade Margin means that the link is more susceptible to failure or performance degradation. Fade Margin is usually expressed in decibels (dB) and can be calculated by subtracting the receiver sensitivity from the received signal level. References: 1, Chapter 2, page 51; 2, Section 2.1

 The most effective method for testing roaming in relation to 802.11 VoIP handsets is to place a call with the handset and move around the facility to test quality duringroaming. This method allows you to evaluate the actual performance and user experience of VoIP calls over wireless networks, as well as identify any potential issues such as signal strength, interference, latency, jitter, packet loss, or handoff delays. A spectrum analyzer can only show you the RF activity during a VoIP call, but not how it affects the voice quality or roaming behavior. A protocol analyzer can capture the traffic generated when a laptop roams, but it cannot simulate the characteristics of a VoIP handset such as battery life, antenna design, codec support, or QoS features. A built-in roaming monitor is not a common feature in all VoIP handsets, and it may not provide accurate or comprehensive information about the roaming process. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 487; [Voice over Wireless LAN 4.1 Design Guide], page 6-19.

DHCP (Dynamic Host Configuration Protocol) is a commonly used method to locate the controllers by the APs in a WLAN that is implemented using wireless controllers. DHCP is a protocol that allows a device to obtain an IP address and other network configuration parameters from a server. In a wireless controller scenario, the APs can use DHCP to request an IP address from a DHCP server, which can also provide the IP address or hostname of the wireless controller as an option in the DHCP response. This way, the APs can discover the wireless controller and establish a connection with it. Alternatively, the APs can also use other methods to locate the wireless controller, such as DNS (Domain Name System), broadcast or multicast discovery, or manual configuration. References: 1, Chapter 8, page 309; 2, Section 5.2

The security option for 802.11 networks that supports SAE and requires protected management frames is WPA3. WPA3 stands for Wi-Fi Protected Access version 3 and is the latest security standard for WLANs. WPA3 supports two modes: WPA3-Personal and WPA3-Enterprise. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) as the key exchange protocol, which provides stronger protection against offline dictionary attacks and password guessing than WPA2-Personal. WPA3 also requires protected management frames, which are encrypted frames that prevent spoofing, replay, or denial-of-service attacks on management frames such as deauthentication or disassociation frames. WPA, WPA2, and OWE do not support SAE or require protected management frames. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 307; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 297.

Cellular/LTE/5G is the best method for implementing a network backhaul for communications across the Internet in a remote area that is affected by a natural disaster. This is because cellular/LTE/5G networks are wireless and do not depend on physical infrastructure that may be damaged or unavailable in such scenarios. Cellular/LTE/5G networks also offer high-speed data transmission and wide coverage area, which are essential for emergency response operations. 802.11 bridging to the response team headquarters is not feasible because it requires line-of-sight and has limited range. Turning up the output power of the WLAN at the response team headquarters is not effective because it may cause interference and does not guarantee reliable connectivity. Temporary wired DSL is not practical because it requires installing cables and equipment that may not be available or accessible in a remote area. References: CWNA-109 Study Guide, Chapter 7: Wireless LAN Topologies, page 2031

An ACK (Acknowledgement) frame is a short control frame that is sent by the receiver of a data or management frame to confirm that the frame was received correctly. The ACK frame is sent after a SIFS (Short Interframe Space) interval, which is the shortest time gap between frames in 802.11. If the transmitter does not receive an ACK frame within a specified time, it assumes that the frame was not delivered and must be retransmitted. This is part of the 802.11 reliability mechanism that ensures reliable data delivery over an unreliable wireless medium . References: [CWNA-109 Study Guide], Chapter 5: IEEE 802.11 Medium Access, page 209; [CWNA-109Study Guide], Chapter 5: IEEE 802.11 Medium Access, page 203.

Discovering the scale of the problem is the next logical step in the troubleshooting process after identifying the problem of poor wireless connections on the third floor of a building under your administration. Troubleshooting is a systematic process of finding and resolving problems or issues in a network or a system. Troubleshooting usually follows a general methodology that consists of several steps or phases, such as:

• Identifying the problem: This step involves defining and describing the problem clearly and accurately based on the symptoms and evidence observed or reported by users or administrators. For example, in this case, the problem is that three individuals have reported poor wireless connections on the third floor of a building.
• Discovering the scale of the problem: This step involves determining how widespread and severe the problem is by gathering more information anddata from different sources and perspectives. For example, in this case, this step could involve checking if other users or devices on the third floor or other floors are experiencing similar issues, verifying if there are any changes or updates in the network configuration or environment that could affect the wireless connections, testing if there are any differences in performance or quality between different access points or channels on the third floor, etc.
• Performing corrective actions: This step involves applying possible solutions or fixes to resolve or mitigate the problem based on logical reasoning and analysis. For example, in this case, this step could involve adjusting the output power or channel assignment of the access points on the third floor, relocating or reorienting some access points or antennas to improve coverage or reduce interference, updating or replacing some faulty or outdated hardware or software components, etc.
• Verifying the solution: This step involves confirming that the problem is solved or improved by testing and monitoring the network performance and user satisfaction after applying corrective actions. For example, in this case, this step could involve measuring and comparing the signal strength and throughput of wireless connections on the third floor before and after performing corrective actions, asking for feedback from users who reported poor wireless connections to see if their issues are resolved or reduced, etc.
• Creating a plan of action or escalating the problem: This step involves documenting and reporting the problem and its solution for future reference and improvement purposes. It also involves deciding whether to close or escalate the problem depending on its status and severity. For example, in this case, this step could involve creating a report that summarizes what was done to troubleshoot and fix poor wireless connections on the third floor with relevant data and evidence to support it. It could also involve escalating poor wireless connections to higher-level administrators if they persist or worsen despite performing corrective actions.

References: 1, Chapter 12, page

In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical step is:

• Station-to-Station Traffic Blocking: Also known as client isolation, this feature prevents direct communication between devices connected to the Wi-Fi network. By enabling this on the access points, Lynne can significantly decrease the likelihood of active attacks like man-in-the-middle (MITM) attacks, where an attacker intercepts and possibly alters the communication between two parties.

The other options, while beneficial for network security, might not be as straightforward or practical for Lynne's situation:

• Network Access Control (NAC)requires a more complex infrastructure and management, which might not be ideal for a small hotel setup.
• Implementing an SSL VPNadds an extra layer of security but might complicate the login process for users, potentially affecting the user experience.
• Requiring EAP-FAST authenticationprovides secure authentication but may not be feasible for transient customers who expect quick and easy network access.

Therefore, enabling station-to-station traffic blocking is a practical and efficient measure that Lynne can implement to enhance customer security on the Wi-Fi network.

References:

• CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.
• Best practices for securing a wireless network in a public hotspot environment.

The authentication method that is referenced in the 802.11-2016 and 802.11-2020 specifications and is recommended for robust WLAN client security is 802.1X/EAP. 802.1X/EAP stands for IEEE 802.1X Port-Based Network Access Control with Extensible Authentication Protocol and is a framework that provides strong authentication and dynamic encryption key generation for WLAN clients. 802.1X/EAP involves three parties: the supplicant (the client), the authenticator (the AP or the controller), and the authentication server (usually a RADIUS server). The supplicant sends its credentials (such as username and password, certificate, or token) to the authenticator, which forwards them to the authentication server. The authentication server verifies the credentials and sends a response to the authenticator, which grants or denies access to the supplicant. The authentication server also generates a master key that is used to derive encryption keys for the data frames between the supplicant and the authenticator. 802.1X/EAP supports various EAP methods that offer different levels of security and flexibility, such as EAP-TLS, EAP-PEAP, EAP-TTLS, EAP-FAST, and EAP-SIM. SSL, IPSec, and WEP are not authentication methods, but rather encryption or security protocols that are not specific to WLANs or referenced in the 802.11 specifications. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 299; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 289.

PoE stands for Power over Ethernet, which is a technology that allows network devices to receive power and data over the same Ethernet cable. PoE eliminates the need for separate power adapters or outlets for devices such as IP phones, cameras, or APs. PoE requires two types of devices: PSE (Power Sourcing Equipment) and PD (Powered Device). A PSE is a device that provides power to the Ethernet cable, such as a switch, injector, or splitter. A PD is a device that receives power from the Ethernet cable, such as an IP phone, camera, or AP. When implementing PoE, a switch plays the role of a PSE910. References: CWNA-109 Study Guide, Chapter 7: Power over Ethernet (PoE), page 293; CWNA-109Study Guide, Chapter 7: Power over Ethernet (PoE), page 287.

Sensors should be deployed in critical areas where WLAN performance must be high for best results when using a WLAN monitoring solution that utilizes distributed sensor devices. A WLAN monitoring solution is a system that collects, analyzes, and reports on the status and performance of a WLAN. A WLAN monitoring solution can use different methods to gather data from the WLAN, such as embedded software agents, external hardware probes, or distributed sensor devices. Distributed sensor devices are dedicated devices that are deployed throughout the WLAN coverage area to monitor the wireless traffic and environment. Distributed sensor devices can perform various functions, such as scanning the spectrum, capturing wireless frames, measuring signal quality, detecting rogue access points, testing connectivity, and generating alerts. Distributed sensor devices can provide more accurate and comprehensive data than other methods, but they also require more planning and deployment costs. Therefore, it is important to deploy sensors strategically in critical areas where WLAN performance must be high, such as high-density zones, high-priority applications, or high-security locations. By deploying sensors in critical areas, the WLAN monitoring solution can ensure optimal WLAN performance and reliability in those areas and identify and resolve any issues or problems that may arise. The other options are not the best places to deploy sensors for best results. Deploying sensors in switching closets is not effective because sensors need to be close to the wireless medium to monitor it properly. Deploying sensors every 5 meters and alongside each AP is not efficient because sensors may overlap or interfere with each other and cause unnecessary redundancy or complexity. Deploying sensors above the plenum oneach floor is not practical because sensors may not capture the wireless traffic and environment accurately due to attenuation or reflection from the ceiling materials or objects. References: CWNA-109 Study Guide, Chapter 14: Troubleshooting Wireless LANs, page 4831

Patch and panel antennas are directional antenna types that are commonly used by indoor Wi-Fi devices in a MIMO multiple spatial stream implementation. These antennas have a flat rectangular shape and can be mounted on walls or ceilings to provide coverage in a specific direction. They have a moderate gain and a relatively wide beamwidth, making them suitable for multipath environments where signals can reflect off different surfaces and create multiple spatial streams. Patch and panel antennas can also support polarization diversity, which means they can transmit and receive both horizontally and vertically polarized waves, increasing the MIMO performance. References: 1, Chapter 2, page 72; 2, Section 2.4

The term used to describe the problem in this configuration is Co-Channel Interference (CCI)1. CCI occurs when multiple access points are on the same or overlapping channels, causing interference and degradation in network performance1. In this case, one AP is on channel 1 and the other is on channel 2, which are overlapping channels, leading to CCI1.

An IEEE 802.11 amendment is a proposed change or addition to the existing 802.11 standard, which defines the specifications and protocols for wireless LANs. An amendment goes through several stages of development, such as draft, sponsor ballot, and final approval, before it is ratified by the IEEE Standards Association and becomes part of the standard. Until then, it has no official impact on the standard, although some vendors may release products based on draft amendments to gain a competitive edge or to influence the final outcome of the amendment . References: [CWNA-109 Study Guide], Chapter 1: Overview of Wireless Standards, Organizations, and Fundamentals, page 25; [CWNA-109Study Guide], Chapter 1: Overview of Wireless Standards, Organizations, and Fundamentals, page 23; [IEEE website], IEEE-SA Standards Development Process.

The BSSID (Basic Service Set Identifier) is typically mapped to an AP’s MAC address if a single BSS is implemented. The BSSID is a unique identifier that distinguishes one BSS from another within the same RF medium. It is usually derived from the MAC address of the AP’s radio interface, but it can also be manually configured or randomly generated by some vendors. The BSSID is used by client stations to associate with an AP and to send and receive frames within a BSS. References: , Chapter 1, page 24; , Section 1.2

Impedance is the measure of opposition to the flow of alternating current (AC) in a circuit. Impedance mismatch occurs when the impedance of the radio does not match the impedance of the antenna or the cable. This causes some of the transmitted or received signal to be reflected back, resulting in a loss of power and efficiency. The voltage standing wave ratio (VSWR) is a metric that indicates the amount of impedance mismatch in a transmission line. A higher VSWR means a higher impedance mismatch and a lower signal quality. A VSWR of 1:1 is ideal, meaning there is no impedance mismatch and no reflected power. A VSWR of 2:1 means that for every 2 units of forward power, there is 1 unit of reflected power12.

The other options are not correct because they do not affect the VSWR in RF cables. A high gain yagi antenna or a high gain parabolic dish antenna can increase the signal strength and directionality, but they do not cause impedance mismatch in the cable. Radio output power above 100 mW but below 400 mW is within the acceptable range for most WLAN devices and does not cause excessive VSWR in the cable3.

References: 1:CWNA-109Official Study Guide, page 77 2: VSWR 3:CWNA-109Official Study Guide, page 81

The likely problem that causes this scenario is faulty drivers. Drivers are software components that enable the communication between the operating system and the hardware devices, such as the wireless adapters. Faulty drivers can cause various issues with the wireless connectivity, such as not detecting or connecting to certain networks, dropping connections, or reducing performance. Faulty drivers can be caused by corrupted files, outdated versions, incompatible settings, or hardware defects. To fix faulty drivers, you can try to update, reinstall, or roll back the drivers, or contact the manufacturer for support. Interference from non-Wi-Fi sources, DoS attack, or interference from other WLANs are not likely to cause this scenario, as they would affect all devices in the same area, not just the new laptops. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 562; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 532.

The string of characters and digits that is entered into an AP and a client STA for WPA2 security and is 8 characters long is called a passphrase. A passphrase is a human-readable text that is used to generate a Pre-Shared Key (PSK) for WPA2-Personal security. A passphrase can be between 8 and 63 characters long and can include any ASCII character. The PSK is a 256-bit key that is derived from the passphrase using a hashing algorithm called PBKDF2. The PSK is used to encrypt and decrypt the data frames between the AP and the client STA. A MSK is a Master Session Key that is generated by an authentication server for WPA2-Enterprise security. A WEP key is a 40-bit or 104-bit key that is used for Wired Equivalent Privacy (WEP) security, which is deprecated and insecure. A PSK is not a string of characters and digits, but a binary key. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 303; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 293.

What prevents each station from using all the airtime when other client stations are actively communicating in the same BSS is CSMA/CA. CSMA/CA stands for Carrier Sense Multiple Access with Collision Avoidance and is a media access control method used by WLAN devices to share the wireless medium. CSMA/CA works by having each station sense the medium before transmitting a frame. If the medium is busy (i.e., another station is transmitting), the station defers its transmission until the medium is idle. If the medium is idle, the station waits for a random backoff period before transmitting. This way, CSMA/CA reduces the chances of collisions and ensures fair access to the medium for all stations. CSMA/CA also uses positive acknowledgements to confirm successful transmissions and retransmissions to recover from errors. CSMA/CD, DOS prevention, and OFDMA are not used by WLAN devices in a BSS. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 108; [CWNA: Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 98.

The device in the bridge implementation that acts as the 802.1X Authenticator is the root bridge. The root bridge is the bridge that connects to the wired network and acts as the central point for all other bridges in the point-to-multipoint topology. The root bridge authenticates the non-root bridges using 802.1X/EAP and forwards their authentication requests to the RADIUS server. The non-root bridges act as the 802.1X Supplicants and use EAP methods such as EAP-TLS or EAP-PEAP to authenticate with the root bridge. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 459; [Cisco Aironet Wireless Bridges FAQ], question 29.

In the 2.4 GHz frequency band used for 802.11 wireless networks, the channel bandwidth is typically 20 MHz, but the actual frequency spread of each channel is about 22 MHz due to the modulation techniques used. This spread causes overlap between adjacent channels, which can lead to interference and degrade network performance. To avoid this, it's essential to use non-overlapping channels.

The three non-overlapping channels in the 2.4 GHz band are 1, 6, and 11. Each of these channels is spaced sufficiently apart to avoid interference with each other:

• Channel 1: Centered at 2.412 GHz.
• Channel 6: Centered at 2.437 GHz.
• Channel 11: Centered at 2.462 GHz.

Given the options provided, option C (1 and 5) is the closest to a pair of non-overlapping channels, although in practice, channel 5 would still cause some interference with channel 1 due to the 22 MHz spread. The ideal choice for non-overlapping channels would be any two channels among 1, 6, and 11, but this is not an option provided. Therefore, within the given options, 1 and 5 are the best choice, understanding that in a real-world scenario, 1 and 6 or 6 and 11 would be preferred to avoid overlap.

References:

• CWNA Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109, by David D. Coleman and David A. Westcott.
• Understanding 2.4 GHz channel arrangement and interference patterns in 802.11 wireless networks.

Passive Gain is the increase of RF energy in an intentional direction with the use of an antenna. It is achieved by focusing the same amount of power into a smaller area, resulting in a higher power density and a stronger signal. Passive Gain does not require any additional power or amplification, but rather depends on the antenna’s physical characteristics, such as size, shape, and orientation. Passive Gain is also expressed in decibels (dB) and is related to the antenna’s beamwidth and directivity. References: 1, Chapter 2, page 63; 2, Section 2.3

The HT (802.11n) physical layer (PHY) specification includes support for and compatibility with both ERP and HR/DSSS. ERP stands for Extended Rate PHY, which is an extension of the original DSSS (Direct Sequence Spread Spectrum) PHY that supports data rates up to 54 Mbps in the 2.4 GHz band. HR/DSSS stands for High Rate/Direct Sequence Spread Spectrum, which is another extension of DSSS that supports data rates up to 11 Mbps in the 2.4 GHz band. HT stands for High Throughput, which is a new PHY that supports data rates up to 600 Mbps in both the 2.4 GHz and 5 GHz bands. HT uses OFDM (Orthogonal Frequency Division Multiplexing) as its modulation scheme, but it also supports legacy DSSS and ERP devices by using a dual preamble and header structure that allows backward compatibility. References: , Chapter 3, page 103; , Section 3.1

The error in administration that could be the cause of this security concern is that HTTP is in use instead of HTTPS. HTTP is an unencrypted protocol that transfers data in plain text over the network. This means that anyone who captures the traffic can see the HTML code of the Web pages used for access point management, as well as any sensitive information such as passwords or configuration settings. HTTPS is an encrypted protocol that uses SSL/TLS to secure the data transmission between the Web browser and the Web server. HTTPS prevents anyone from snooping on or tampering with the Web traffic. Therefore, HTTPS should always be used for Web based management of wireless access points, especially in autonomous mode where there is no centralized controller to enforce security policies. References: [CWNP Certified Wireless Network Administrator Official Study Guide: ExamCWNA-109], page 431; [HTTP vs HTTPS: What’s The Difference And Why Should You Care?].

The scenario described suggests that while the Access Point (AP) is capable of 802.11ax (Wi-Fi 6) with four spatial streams, the clients are only achieving data rates typical of 802.11n (Wi-Fi 4) devices, which indicates that the clients are likely 802.11n devices. Here's why this is the most plausible explanation:

• 802.11n Limitations: Devices that adhere to the 802.11n standard have lower maximum data rates compared to 802.11ax devices due to differences in technology such as modulation, spatial streams, and channel bandwidth. An 802.11n device with a single spatial stream operating on a 20 MHz channel can achieve a maximum data rate of 72.2 Mbps. Even with two spatial streams under ideal conditions, this would only double to approximately 144.4 Mbps, which is close to the 150 Mbps mentioned.
• Spatial Stream Capability: The fact that the AP supports four spatial streams suggests it can achieve much higher data rates with 802.11ax clients that also support multiple spatial streams. However, if the clients are 802.11n devices, they may not be capable of using more than two spatial streams, and many earlier 802.11n devices were limited to just one.

The other options are less likely to be the primary cause based on the information provided:

• B. Two Stream 802.11ax Clients: If the clients were 802.11ax with only two spatial streams, they would likely achieve higher data rates than 150 Mbps due to the efficiency improvements in 802.11ax.
• C. Contention and D. Non-Wi-Fi Interference: While these could affect performance, they would not inherently limit clients to 150 Mbps,especially in the context of an 802.11ax environment where mechanisms to handle interference and contention are more advanced.

References:

• IEEE 802.11n-2009: Enhancements for Higher Throughput.
• CWNA Certified Wireless Network Administrator Official Study Guide: Exam PW0-105, by David D. Coleman and David A. Westcott.