CWNP Certified Wireless Analysis Professional - CWAP-404 Exam Questions [2026]

QUESTION NO: 1
Which one of the following is not an 802.11 Management frame?

A. Authentication B. Beacon C. Action D. PS-Poll

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
You are troubleshooting a client that is experiencing slow WLAN performance. As part of the troubleshooting activity, you start a packet capture on your laptop close to the client device. While analyzing the packets, you suspect that you have not captured all packets transmitted by the client. By analyzing the trace file, how can you confirm if you have missing packets?

A. The missing packets will be shown as CRC errored packets B. Protocol Analyzers show the number of missing packets in their statistics view C. Retransmission are an indication of missing packets D. Look for gaps in the sequence number in MAC header

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
During an initial install of a controller-based WLAN, the APs are not locating the WLAN controller.
The controller is two router hops away from the nearest AP. DHCP is not used. When performing a packet trace, you see a DNS response code of 3 targeted at one of the APs.
What is the problem?

A. The authentication to the DNS server failed B. The controller host record has not been created in the DNS server C. The router is not forwarding packets to the DNS server D. The DNS server is not authoritative for the domain

Correct Answer: B

QUESTION NO: 4
You are evaluating a protocol capture file in Wireshark.
The following filter is applied:
wlan_radio.11ac.bandwidth - - 4
What kind of frames are displayed?

A. Only 80 MHz frames B. Only 40 MHz frames C. Only frames supporting 4 spatial streams D. Only frames supporting 4 radio chains

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
You are analyzing a packet decode of a Probe Request and notice the SSID element has a length of zero.
What do you conclude about transmitting STA?

A. The STA's WLAN adaptor is disabled B. The STA is discovering a list of available BSSs C. The STA is operating in Ad-Hoc mode D. The WLAN adaptor is configured in promiscuous mode

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Recently, three rogue APs have been connected to the network and later discovered. You want to prevent future rogue AP installations as much as possible.
What is the first step to eliminating or reducing rogue APs on the network?

A. Define a direct policy that stipulates the ramifications of installing unauthorized devices B. Enable rogue detection in the existing authorized APs C. Use IPSec between every AP and the network infrastructure D. Create a hash of the MAC addresses of all authorized devices and continually scan for non- matching hashes

Correct Answer: B

QUESTION NO: 7
What is the function of the PMD sub-layer?

A. Performs A-MPDU B. Provides framing C. Adds a PHY preamble and header to a PSDU D. Converts 1s and 0s given to it by the PLCP sub-layer into the appropriate RF signals

Correct Answer: D

QUESTION NO: 8
An HT STA does not receive an ACK for a first-attempt data frame that it transmitted. Assuming this STA is not using BlockAcks in this case, what happens to the HT STA's EDCA contention window?

A. The contention window is immediately closed, and the frame is retransmitted. B. The slot time within the contention window decreases by 50%. C. It varies because the backoff algorithm is random. D. The contention window approximately doubles in size. E. The contention window is not affected by failed Data frame delivery.

Correct Answer: D

QUESTION NO: 9
Protocol analyzers may present field values in either binary, decimal or hexadecimal. What precedes a hexadecimal value to indicate it is hexadecimal?

A. HEX B. 0x C. % D. 16x

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
What is encrypted within the fourth frame of the 4-Way Handshake?

A. PTK B. GTK C. PMK D. GMK

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 11
Using the exhibit as a reference, answer the following.

STA1 sent a data frame to Mesh AP2 destined for a local file server on the same subnet with MAC address 00:11:22:33:44:55. Mesh AP2's mesh forwarding algorithm determined that the frame should be forwarded through Mesh AP1.
In the frame sent from Mesh AP2 to Mesh AP1, what is true of the contents of the MAC header?
(Choose 3)

A. TA = STA1's MAC Address B. From DS = 1 C. DA = 00:11:22:33:44:55 D. SA = Mesh AP2's MAC Address E. RA = Mesh AP1's MAC Address F. To DS = 0

Correct Answer: B,C,E