CWDP Wi-Fi Design CWDP-305 CWNP Study Notes

Comprehensive and Detailed Explanation:

EAP (Extensible Authentication Protocol) messages are encapsulated withinEAP over LAN (EAPOL)frames when transmitted over 802.11 wireless networks. EAPOL operates at the data link layer and is part of the 802.1X standard, facilitating authentication between the client (supplicant) and the authentication server.

A.EAP-Fast is an EAP method, not the transport mechanism.

B.PEAP is another EAP method that encapsulates EAP within a TLS tunnel.

D.EAP-TLS is an EAP method utilizing TLS for authentication.

Comprehensive and Detailed Explanation:

High Rate Direct Sequence Spread Spectrum (HR/DSSS) is associated with the IEEE 802.11b standard, which specifies the following physical layer (PHY) data rates:

1 Mbps and 2 Mbps:Achieved using Differential Binary Phase Shift Keying (DBPSK) and Differential Quadrature Phase Shift Keying (DQPSK) modulation techniques, respectively.

5.5 Mbps and 11 Mbps:Achieved using Complementary Code Keying (CCK) modulation, which allows higher data rates while maintaining robustness against interference.

These rates are specific to the 802.11b standard operating in the 2.4 GHz band.

Lower data rates, such as 1 Mbps, use simpler modulation schemes (e.g., BPSK) which are more robust against noise and require lower signal-to-noise ratios (SNR) for successful reception.This means that frames transmitted at lower data rates can be received over longer distances compared to higher data rates like 54 Mbps, which use more complex modulation schemes (e.g., 64-QAM) that require higher SNR and are more susceptible to signal degradation.

EAP-TTLS (Extensible Authentication Protocol - Tunneled Transport Layer Security) is designed to provide secure authentication using a server-side certificate while allowing for optional client-side certificates. This flexibility makes it suitable for environments where client credentials (such as usernames and passwords) are used, and the server must present a certificate, but client certificates are not mandatory.

The CWDP-305 Official Study and Reference Guide explains:

"EAP-TTLS allows the use of server-side certificates to establish a secure tunnel, within which client authentication can occur using various methods, including username/password. Client certificates are optional, providing flexibility in deployment."