CWAP Certified Wireless Analysis Professional - PW0-270 Exam Questions [2026]

QUESTION NO: 1
In which 802.11 frames is the SSID present, provided the SSID is not removed through proprietary software configuration by an administrator? (Choose 3)

A. Probe Response B. Authentication C. Reassociation Request D. Association Response E. Disassociation F. Association Request

Correct Answer: A,C,F

QUESTION NO: 2
The IEEE 802.11 Dynamic Frequency Selection (DFS) service is capable of performing what functions? (Choose 2)

A. Establishing an interference baseline on all 2.4 GHz channels B. Testing channels for radar before using a channel and while operating in a channel C. Using modulation switching techniques to avoid interfering with radar systems D. Requesting and reporting of measurements in the current and other channels E. Suspending operations on a channel with high IEEE 802.11 co-channel interference

Correct Answer: B,D

QUESTION NO: 3
Which statements are true regarding Beacons from an AP in an HT infrastructure BSS that is configured with multiple WLAN profiles? (Choose 3)

A. The Destination Address is always FF:FF:FF:FF:FF:FF. B. The Receiver address and the BSSID are always the same. C. The Beacon interval must be the same for all WLANs (SSIDs) supported by a single AP D. Beacons can be disabled for security purposes. E. The BSSID and Source Address are always the same. F. All Beacons generated by APs contain a TIM information element. G. When the SSID is "hidden," the ESS subfield of the Capability Information field distinguishes one BSS from another.

Correct Answer: A,E,F

QUESTION NO: 4
While at a government-operated facility, you are attempting to troubleshoot a WLAN performance problem using a wireless protocol analyzer. When you start capturing frames, you see a proprietary layer 2 protocol running over the ERP network as shown in this screenshot. The facility's WLAN administrator confirms that this protocol is proprietary and used for both data encryption and compression.

How will this information affect the steps you take to troubleshoot performance problems on this WLAN?

A. In order to troubleshoot performance problems on a network using proprietary encryption protocols like this one, you must use a wireless protocol analyzer that has integrated support for the protocol in use. B. As long as you load the proprietary software codec onto your analyzer computer, you will be able to see all of the Data frame information fully decoded. Loading the proprietary software codec will allow you to troubleshoot the WLAN as though no encryption were in use. C. The proprietary encryption protocol will have no effect on your troubleshooting steps because the wireless protocol analyzer can still decode the PLCP and MAC headers of Data frames. This situation is essentially no different than troubleshooting a WLAN that uses WPA2-Personal. D. Troubleshooting will be somewhat limited because only part of the information needed for performance measurements by the analyzer is encrypted. Each Data frame's MAC header will be encrypted, but the PLCP header can still be decoded successfully.

Correct Answer: C

QUESTION NO: 5
Shown is a screenshot of a wireless protocol analyzer displaying the decode information for a single 802.11 encrypted data + CF-Poll frame. The infrastructure BSS on which this information was captured is using WEP and this particular frame was sent from a client station (STA) to an access point (AP).

As a protocol analyst, how would you explain the existence of this frame on the wireless medium given the information in the decode?

A. The frame was sent by a client station that does not comply with IEEE HR/DSSS standard to an access point that is Wi-Fi certified. B. The frame was misinterpreted because of insufficient information received by the analyzer due to frame corruption. C. The access point is operating as a repeater, and clients must poll repeater access points in order to transmit data frames through them. D. The IEEE 802.11 network is using both version 1 and version 2 protocols simultaneously. This unexpected frame is from the version 2 protocol set.

Correct Answer: B

QUESTION NO: 6
As it pertains to HT L-SIG TXOP Protection, what statement is true?

A. An L-SIG TXOP protected frame exchange sequence always begins with an RTS/CTS or a CTS-to-Self. B. Support for L-SIG TXOP Protection is indicated in the HT Capabilities Info field of (re)association request frames sent by ERP, OFDM, and HT-OFDM stations. C. L-SIG TXOP Protection is specified for the purpose of protecting OFDM (802.11a/g) and HTOFDM (802.11n) transmissions from HR/DSSS stations. D. Support for L-SIG TXOP Protection is indicated by HT stations in the L-SIG field of the PLCP header of HT-mixed format frames.

Correct Answer: A