An RST frame should be acknowledged by which frame?
A. Ack
B. CTS
C. Block Ack
D. RTS-Ack
Given: The Frame Check Sequence (FCS) is a 32 CRC used for error detection. The CRC is calculated over what?
A. Frame Body only
B. Mac Header and Frame Body only
C. PHY Header, MAC Header and Frame Body
D. PHY Header and MAC Header only
As a wireless network consultant you have been called in to troubleshoot a high-priority issue for one of your customers. The customer's office is based on two floors within a multi-tenant office block. On one of these floors (floor 5) users cannot connect to the wireless network. During their own testing the customer has discovered that users can connect on floor 6 but not when they move to the floor 5. This issue is affecting all users on floor 5 and having a negative effect on productivity. To troubleshoot this issue, you perform both Spectrum and Protocol Analysis. The Spectrum Analysis shows the presence of Bluetooth signals which you have identified as coming from wireless mice. In the protocol analyzer you see the top frame on the network is deauthentication frames. On closer investigation you see that the deauthentication frames' source addresses match the BSSISs of your customers APs and the destination address is FF:FF:FF:FF:FF:FF:FF. What do you conclude from this troubleshooting exercise?
A. The customer should replace all their Bluetooth wireless mice as they are stopping the users on floor 5 from connecting to the wireless network
B. The users on floor 5 are being subjected to a denial of service attack, as this is happening across the entire floor it is likely to be a misconfigured WIPS solution belonging to the tenants on the floor below
C. The customers APs are misbehaving and a technical support case should be open with the vendor
D. The CCI from the APs on the floor 4 is the problem and you need to ask the tenant below to turn down their AP's Tx power
Which one of the statements regarding the Frame Control field in an 802.11 MAC header is true?
A. Only Control frames have a Frame Control field
B. The Frame Control field contains three sub-fields and eight one-bit flags
C. The Frame Control field is used to communicate the duration value
D. The Frame Control field is always set to 0
After examining a Beacon frame decode you see the SSID Element has a length of 0. What do you conclude about this frame?
A. The frame is corrupted
B. This is a common attack on WISP backend SQL databases
C. The beacon is from a BSS configured to hide the SSID
D. SSID elements always have a length of 0
When would you expect to see a Reassociation Request frame?
A. Every time a STA associates to an AP to which it has previously been associated
B. Only when a STA is using FT roaming
C. Only when a STA roams back to an AP it has previously been associated with
D. Every time a STA roams
When performing protocol analysis, you notice a high number of RTS/CTS frames being transmitted on an HT network. You suspect this may be due to HT protection mechanisms. Where in the Beacon frame would you look to determine which one of the four HT protection modes the AP is operating in?
A. HT Protection Element
B. HT Information Element
C. HT Operation Element
D. Non-HT Present Element
Which one of the following is not a valid acknowledgment frame?
A. RTS
B. CTS
C. Ack
D. Block Ack
Which common feature of a Spectrum Analyzer would be the best to help you locate a non-802.11 interference source?
A. Max hold
B. Location filter
C. Waterfall plot
D. Device finder
You are troubleshooting a client that is experiencing slow WLAN performance. As part of the troubleshooting activity, you start a packet capture on your laptop close to the client device. While analyzing the packets, you suspect that you have not captured all packets transmitted by the client. By analyzing the trace file, how can you confirm if you have missing packets?
A. Look for gaps in the sequence number in MAC header
B. Protocol Analyzers show the number of missing packets in their statistics view
C. Retransmission are an indication of missing packets
D. The missing packets will be shown as CRC errored packets