By
Introduction
When you pass the CWAP exam and hold a valid CWNA certification, you earn
the CWAP certification and credits towards the CWNE certification should you
choose to pursue it.
The Certified Wireless Analysis Professional (CWAP) is responsible for the
capture and analysis of data related to wireless networks following
troubleshooting principles and methodology. This professional has an in-depth
understanding of protocols, frame exchanges and standards at the Physical layer
and MAC sublayer. This person is proficient in the use of spectrum and protocol
analysis tools.
The skills and knowledge measured by this examination are derived from a Job
Task Analysis (JTA) involving wireless networking experts (CWNEs) and
professionals. The results of this JTA were used in weighing the subject areas
and ensuring that the weighting is representative of the relative importance of
the content.
Subject matter experts (SMEs) involved in the development of these objectives
and/or the JTA included:
1.0 Protocol Analysis – 15%
1.1 Capture 802.11 frames using the appropriate methods and locations
1.1.1 Install monitor mode drivers
1.1.2 Select appropriate capture device
1.1.3 Select appropriate capture location
1.1.4 Capture for an appropriate amount of time based on the problem scenario
1.1.5 Scanning channels vs. capturing on a single channel
1.1.6 Capturing in roaming scenarios
1.1.7 Capture with portable protocol analyzers (laptops)
1.1.8 Capture with APs, controllers, and other management solutions
1.1.9 Capture with specialty devices such as handheld analyzers
1.2 Analyze 802.11 frame captures to discover problems and find solutions
1.2.1 Use appropriate display filters to view relevant frames and packets
1.2.2 Use colorization to highlight important frames and packets
1.2.3 Configure and display columns for analysis purposes
1.2.4 View frame and packet decodes and understand the information shown and
apply it to the analysis process
1.2.5 Use multiple adapters and channel aggregation to view captures from
multiple channels
1.2.6 Implement protocol analyzer decryption procedures
1.2.7 View and use captures statistical information for analysis
1.2.8 Use expert mode for analysis
1.2.9 View and understand peer maps as they relate to communications analysis
1.3 Understand and apply the common capture configuration parameters available
in protocol analysis tools
1.3.1 Save to disk
1.3.2 Packet slicing
1.3.3 Event triggers
1.3.4 Buffer options
1.3.5 Channels and channel widths
1.3.6 Capture filters
1.3.7 Channel scanning and dwell time
1.4 Utilize additional tools that capture 802.11 frames for the purposes of
analysis and troubleshooting
1.4.1 WLAN scanners and discovery tools
1.4.2 Protocol capture visualization and analysis tools
1.4.3 Centralized monitoring, alerting and forensic tools
1.5 Ensure appropriate troubleshooting methods are used with all analysis types
1.5.1 Define the problem
1.5.2 Determine the scale of the problem
1.5.3 Identify probably causes
1.5.4 Capture and analyze the data
1.5.5 Observe the problem
1.5.6 Choose appropriate remediation steps
1.5.7 Document the problem and resolution
2.0 Spectrum Analysis – 15%
2.1 Capture RF spectrum data and understand the common views available in
spectrum analyzers
2.1.1 Install, configure and use spectrum analysis software and hardware
Configure Wi-Fi integration
Save and export capture data
2.1.2 Capture RF spectrum data using handheld, laptop-based and infrastructure
spectrum capture solutions
2.1.3 Understand and use spectrum analyzer views
Real-time FFT
Waterfall, swept spectrogram, density and historic views
Utilization and duty cycle
Detected devices
WLAN integration views
2.2 Analyze spectrum captures to identify relevant RF information and issues
2.2.1 Determine the RF noise floor in an environment
2.2.2 Determine Signal-to-Noise Ration (SNR) for a given signal
2.2.3 Locate and identify sources of RF interference
2.2.4 Identify RF channel utilization
2.2.5 Analyze a non-Wi-Fi transmitter and its impact on WLAN communications
2.2.6 Overlapping and non-overlapping adjacent channel interference
2.2.7 Poor performing or faulty radios
2.3 Analyze spectrum captures to identify various device signatures
2.3.1 Identify frequency hopping devices
2.3.2 Identify various 802.11 PHYs
802.11b
802.11g
802.11a
802.11n
802.11ac
Channel widths
Primary channel
2.3.3 Identify non-802.11 devices based on RF behaviors and signatures
Microwave oven
Video devices
Jammers
Cordless phones
2.4 Centralized spectrum analysis solutions
2.4.1 AP-based spectrum analysis
2.4.2 Sensor-based spectrum analysis
3.0 PHY Layers and Technologies – 10%
3.1 Understand and describe the functions and the PLCP and PMD sublayers
3.2 Apply the understanding of PHY technologies (including PHY headers,
preambles, training fields, frame aggregation and data rates) to captured data
3.2.1 DSSS
3.2.2 HR/DSSS
3.2.3 OFDM
3.2.4 ERP
3.2.5 HT
3.2.6 VHT
3.3 Identify and use PHY information provided in pseudo-headers within protocol
analyzers
3.3.1 Pseudo-header formats
Radiotap
Per Packet Information (PPI)
3.3.2 Signal strength
3.3.3 Data rate and MCS index
3.3.4 Length information
3.3.5 Channel center frequency or received channel
3.3.6 Channel properties
3.3.7 Noise
3.4 Recognize the limits of protocol analyzers in capturing PHY information
including NULL data packets and PHY headers
3.5 Use appropriate capture devices based on an understanding of PHY types
3.5.1 Supported PHYs
3.5.2 Supported spatial streams
3.5.3 Short Guard Interval (SGI)
4.0 MAC Sublayer and Functions – 25%
4.1 Understand frame encapsulation and frame aggregation
4.2 Identify and use MAC information in captured data for analysis
4.2.1 Management, control, and data frames
4.2.2 MAC Frame Format
Frame Control Field
To DS and From DS
Address Fields
Frame Check Sequence (FCS)
4.2.3 802.11 Management Frame Formats
Information Elements
Authentication
Association and Reassociation
Beacon
Probe Request and Probe Response
4.2.4 Data and QoS Data Frame Formats
4.2.5 802.11 Control Frame Formats
Acknowledgement
RTS/CTS
Block Acknowledgement and related frames
4.3 Validate BSS configuration through protocol analysis
4.3.1 Country code
4.3.2 Minimum basic rate
4.3.3 Supported rates
4.3.4 Beacon intervals
4.3.5 WMM settings
4.3.6 RSN settings
4.3.7 HT and VHT operations
4.3.8 Channel width
4.3.9 Primary channel
4.3.10 Hidden or non-broadcast SSIDs
4.4 Identify and analyze CRC error frames and retransmitted frames
5.0 WLAN Medium Access – 10%
5.1 Understand 802.11 contention algorithms in-depth and know how they
impact WLANs
5.1.1 Distributed Coordination Function (DCF)
Carrier Sense and Energy Detect
Network Allocation Vector (NAV)
Contention Window (CW) and random backoff
Interframe Spacing
5.1.2 Enhanced Distributed Channel Access (EDCA)
EDCA Function (EDCAF)
Access Categories and Queues
AIFSN
5.1.3 Wi-Fi Multimedia (WMM)
WMM parameters
WMM Power Save
WMM Admission Control
5.2 Analyze QoS configuration and operations
5.2.1 Verify QoS parameters in capture files
5.2.2 Ensure QoS is implemented end-to-end
6.0 802.11 Frame Exchanges – 25%
6.1 Capture, understand, and analyze BSS discovery and joining frame exchanges
6.1.1 BSS discovery
6.1.2 802.11 Authentication and Association
6.1.3 802.1X/EAP exchanges
6.1.4 Pre-shared key authentication
6.1.5 Four-way handshake
6.1.6 Group key exchange
6.1.7 Pre-FT (802.11r) fast secure roaming mechanisms
6.1.8 Fast BSS Transition (FT) roaming exchanges and fast secure roaming
6.1.9 Hotspot 2.0 protocols and operations from a client access perspective (ANQP
and initial access)
6.1.10 Neighbor discovery
6.2 Analyze roaming behavior and resolve problems related to roaming
6.2.1 Sticky clients
6.2.2 Excessive roaming
6.2.3 Channel aggregation for roaming analysis
6.3 Analyze data frame exchanges
6.3.1 Data frames and acknowledgement frames
6.3.2 RTS/CTS data frame exchanges
6.3.3 QoS data frame exchanges
6.3.4 Block Acknowledgement exchanges
6.4 Analyze HT/VHT-specific transmission methods
6.4.1 MIMO
6.4.2 Transmit Beamforming (TxBF)
6.4.3 MU-MIMO
6.4.4 Frame aggregation (A-MSDU and A-MPDU)
6.5 Analyze behavior and resolve problems related to MAC layer operations
6.5.1 Power Save operations
6.5.2 Protection mechanisms
6.5.3 Load balancing
6.5.4 Band Steering
QUESTION 1
When a data frame is encrypted with WPA2, to which portion of the frame is the encryption applied?
A. Frame body excluding the LLC
B. Frame body including the LLC
C. Frame body and MAC Header
D. The whole MPDU
Answer: C
QUESTION 2
In the 2.4 GHz band, what data rate are Probe Requests usually sent at from an unassociated STA?
A. The minimum basic rate
B. 1 Mbps
C. 6 Mbps
D. MCS 0
Answer: B
QUESTION 3
An RST frame should be acknowledged by which frame?
A. Ack
B. CTS
C. Block Ack
D. RTS-Ack
Answer: A
QUESTION 4
You have installed a new 802.11ac WLAN configured with 80 MHz channels. Users in one area are complaining about poor performance. This area is currently served by a single AP. You take a spectrum analysis capture in the poor performing area. While examining the waterfall plot you notice the airtime utilization is higher on the first 20 MHz of the 80 MHz channel when compared to the rest of the channel.
What do you conclude?
A. The AP is misconfigured and needs to be reconfigured to 80MHz operation
B. RRM is enabled and has dynamically picked a 20 MHz channel
C. The first 20 MHz is the AP’s primary channel and higher airtime utilization on the primary channel is normal when an AP Is configured for 80 MHz operation
D. Non Wi-Fi interference is preventing the APs 80 MHz operation
Answer: C
QUESTION 5
Given a protocol analyzer can decrypt WPA2-PSK data packets providing the PSK and SSID are configured in the analyzer software.
When performing packet capture (in a non-FT environment) which frames are required in order for PSK frame decryption to be possible?
A. Authentication
B. Reassociation
C. 4-Way Handshake
D. Probe Response
Answer: C
Click here
to view complete Q&A of CWAP-403 exam
Certkingdom Review,
Certkingdom PDF Torrents
Best CWAP CWAP-403 Certification, CWAP-403 Training at certkingdom.com
Comments Off on CWAP-403 Certified Wireless Analysis Professional