📶 Wireless Networking - CCNA Practice Questions

Understand WLAN architecture, wireless standards (802.11a/b/g/n/ac/ax), WLC and lightweight APs, SSID configuration, wireless security (WPA2, WPA3), and RF concepts.

11Questions Available
2Exam Domains

Practice Wireless Questions Now

Start a timed practice session focusing on Wireless Networking topics from the CCNA question bank.

Start CCNA Practice Quiz →

CCNA Wireless Question Bank (11 Questions)

Browse all 11 practice questions covering Wireless Networking for the CCNA certification exam. Each question includes the full answer and a detailed explanation to help you understand the concepts.

  1. Question 1IP Services

    What protocol does a lightweight AP use to communicate with the WLC?

    AHTTP
    BCAPWAP (Control and Provisioning of Wireless Access Points) — UDP ports 5246 (control, encrypted) and 5247 (data, optionally encrypted)✓
    CSMTP
    DFTP
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    CAPWAP (RFC 5415): control channel (UDP/5246, always DTLS encrypted) carries configuration, firmware, management. Data channel (UDP/5247, optional encryption) tunnels client traffic to WLC (in local mode). AP discovers WLC via DHCP option 43, DNS, or broadcast.

  2. Question 2Security Fundamentals

    Why is WPA3 more secure than WPA2 for wireless networks?

    AWPA3 uses a longer SSID
    BWPA3 uses SAE (Simultaneous Authentication of Equals) instead of PSK, providing protection against offline dictionary attacks✓
    CWPA3 requires Ethernet backup
    DWPA3 is only for 5 GHz
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    WPA3 improvements: SAE replaces PSK 4-way handshake (resists offline dictionary attacks even if password is weak), forward secrecy (past sessions can't be decrypted if password is later compromised), and 192-bit security suite for enterprise. OWE encrypts open networks.

  3. Question 3Network Fundamentals

    Which IEEE 802.11 standard operates exclusively in the 5 GHz frequency band?

    A802.11b
    B802.11g
    C802.11a✓
    D802.11n
    Show Answer & Explanation
    Correct Answer: C
    Explanation:

    802.11a operates exclusively in the 5 GHz band with a maximum data rate of 54 Mbps. 802.11b and 802.11g use 2.4 GHz, while 802.11n uses both bands.

  4. Question 4Network Access

    What is the maximum theoretical data rate and frequency band of Wi-Fi 6 (802.11ax)?

    A1.3 Gbps on 5 GHz only
    BUp to 9.6 Gbps operating on both 2.4 GHz and 5 GHz bands with OFDMA and MU-MIMO✓
    C54 Mbps on 2.4 GHz
    D600 Mbps on 5 GHz only
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    Wi-Fi 6 (802.11ax): up to 9.6 Gbps, dual-band (2.4 + 5 GHz). Key improvements: OFDMA (multiple users per channel simultaneously), 8x8 MU-MIMO, BSS coloring (reduced interference), TWT (Target Wake Time for battery savings), and 1024-QAM.

  5. Question 5Network Access

    What is the primary function of a Wireless LAN Controller (WLC) in a Cisco wireless deployment?

    ATo provide DHCP services to wireless clients
    BTo centrally manage and configure lightweight access points✓
    CTo act as the default gateway for all wireless traffic
    DTo provide DNS resolution for wireless clients
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    A WLC centrally manages lightweight APs (LAPs) using CAPWAP, handling configuration, firmware updates, RF management, and security policies.

  6. Question 6Network Access

    Which wireless security protocol uses AES-CCMP encryption?

    AWEP
    BWPA
    CWPA2✓
    DOpen authentication
    Show Answer & Explanation
    Correct Answer: C
    Explanation:

    WPA2 uses AES-CCMP (Counter Mode with CBC-MAC Protocol) for encryption. WPA uses TKIP, and WEP uses RC4. WPA3 uses SAE and AES-GCMP.

  7. Question 7Security Fundamentals

    Which authentication protocol does WPA3-Personal use?

    APSK
    BSAE (Simultaneous Authentication of Equals)✓
    CEAP-TLS
    DPEAP
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    WPA3-Personal uses SAE, which provides stronger protection against offline dictionary attacks compared to WPA2's PSK four-way handshake.

  8. Question 8Network Access

    What functions does a Wireless LAN Controller (WLC) perform?

    AOnly DHCP services
    BCentralized AP management, RF management (channel/power), security policy enforcement, client roaming, firmware distribution, and guest access✓
    COnly routing
    DOnly switching
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    WLC functions: AP image/config management via CAPWAP, automatic RF management (RRM — channel/power optimization), security (802.1X, guest portals, rogue detection), seamless client roaming between APs, QoS, and load balancing across APs.

  9. Question 9Network Access

    What type of wireless security uses a RADIUS server for authentication?

    AWPA2-Personal (PSK)
    BWPA2-Enterprise (802.1X) — each user authenticates with unique credentials via a RADIUS server like Cisco ISE✓
    COpen authentication
    DWEP
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    WPA2-Enterprise uses 802.1X with a RADIUS server: each user/device authenticates with unique credentials (username/password, certificate). More secure than PSK (shared password). Supports EAP methods: PEAP (password), EAP-TLS (certificates). Cisco ISE is a common RADIUS server.

  10. Question 10Network Access

    A wireless network uses WPA3-Personal for security. Which encryption protocol does it employ?

    ATKIP
    BWEP
    CAES with SAE (Simultaneous Authentication of Equals)✓
    DRC4
    Show Answer & Explanation
    Correct Answer: C
    Explanation:

    WPA3-Personal uses SAE (Simultaneous Authentication of Equals) for key exchange and AES-CCMP/GCMP for encryption. SAE replaces the PSK four-way handshake, providing forward secrecy and resistance to offline dictionary attacks. TKIP was used in WPA, WEP/RC4 are deprecated and insecure.

  11. Question 11Network Access

    Which wireless infrastructure mode requires a Wireless LAN Controller (WLC) to manage lightweight access points?

    AAutonomous mode
    BFlexConnect (HREAP) mode
    CCentralized (split-MAC) mode✓
    DCloud-managed mode
    Show Answer & Explanation
    Correct Answer: C
    Explanation:

    In centralized (split-MAC) mode, lightweight APs (LAPs) use CAPWAP to tunnel management and data traffic to a Wireless LAN Controller (WLC). The WLC handles authentication, policy enforcement, and RF management centrally. Autonomous APs are self-managed. FlexConnect allows local switching when WLC connectivity is lost.

Key Wireless Concepts for CCNA

wirelesswifiwlan802.11wlcapssidwpa2wpa3capwaplightweight ap

CCNA Wireless Exam Tips

Wireless Networking questions in CCNA are typically scenario-based. Focus on service-level decision making aligned to official exam objectives. Priority concepts: wireless, wifi, wlan, 802.11, wlc, ap.

What CCNA Expects

  • Anchor your answer in select the most practical, secure, and scalable answer for the stated scenario.
  • Wireless scenarios for CCNA are frequently mapped to Domain 2 (20%), Domain 5 (15%), so read the objective carefully before picking controls or architecture.
  • Expect multi-service scenarios where Wireless interacts with IAM, networking, storage, or observability patterns rather than appearing as an isolated service question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and managed-service best practices.

High-Value Wireless Concepts

  • Know the core Wireless building blocks cold: wireless, wifi, wlan, 802.11.
  • Review the edge-case features and limits for wlc, ap; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how Wireless pairs with Security Fundamentals, Network Fundamentals, Switching in real deployment patterns.
  • For CCNA, explain why the chosen Wireless design meets reliability, security, and cost expectations better than the alternatives.

Common CCNA Traps

  • Watch for answers that partially solve the requirement but miss operational constraints.
  • Questions in Network Access often include distractors that look correct for Wireless but violate least-privilege, durability, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two Wireless implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Network Access (20%) outcomes for CCNA?
  • Can you explain security and access boundaries for Wireless without relying on default-open assumptions?
  • Can you describe how Wireless integrates with Security Fundamentals and Network Fundamentals during failure, scaling, and monitoring events?

Exam Domains Covering Wireless

Domain 2Network Access20%Domain 5Security Fundamentals15%

Related Resources

🎯 Free CCNA Mock Exam📝 Security Fundamentals Questions📝 Network Fundamentals Questions📝 Switching Questions

More CCNA Study Resources

← CCNA Study Hub30-Day Study PlanFull Practice Exam