Study guide
1.2 CWNA-109 Knowledge Domains and Study Strategy
CWNA Certified Wireless Network Administrator CWNA-109
Track your progress as you read
Finished sections get a check mark.
1 Introduction & Exam Overview
1.1 Current Exam Facts 1.2 CWNA-109 Knowledge Domains and Study Strategy
2 RF Fundamentals
2.1 RF Waves, Propagation, Gain and Loss 2.2 Reflection, Multipath, VSWR and Free-Space Path Loss 2.3 RF Units and the Rule of 10s and 3s
3 RF Measurement and Antenna Systems
3.1 Noise Floor, SNR, RSSI and EIRP 3.2 Line of Sight, Fresnel Zone, Polarization and MIMO 3.3 Antenna Types, Charts, Cables and Lightning Protection
4 Industry Bodies and Legacy PHY
4.1 Industry Organizations and OSI Layers 4.2 Legacy 802.11 PHY Standards 4.3 Spread Spectrum, Modulation and MCS
5 Modern 802.11 PHY and Channel Concepts
5.1 Wi-Fi 4 HT and Wi-Fi 5 VHT 5.2 Wi-Fi 6 and Wi-Fi 6E High Efficiency 5.3 Primary Channels, OBSS, Throughput and Guard Interval
6 Spectrum Rules and WLAN Use Cases
6.1 Frequency Bands, DFS and Transmit Power Control 6.2 WLAN, Bridging, Peer-to-Peer and Mesh
7 802.11 Service Sets and Framing
7.1 Stations, BSS, ESS and the Distribution System 7.2 MSDU, MPDU, PSDU, PPDU and Aggregation 7.3 MAC Frame Format and Addressing
8 Frame Types, Discovery, and Association
8.1 Management, Control and Data Frames 8.2 Scanning, Authentication and Association
9 Channel Access, MAC Operations, and Devices
9.1 DCF, EDCA, RTS/CTS and Interframe Spaces 9.2 Roaming, Power Save and Protection Mechanisms 9.3 Access Points, Controllers and Client Devices
10 PoE, Architectures, and Proprietary Features
10.1 Power over Ethernet, PSE and Power Budgets 10.2 Centralized vs Distributed Forwarding and Network Planes 10.3 Airtime Fairness, Band Steering and RRM
11 WLAN Design and Supporting Services
11.1 Data, Voice, Video and Legacy Client Design 11.2 High-Density, Location Services and Guest Access 11.3 DHCP, DNS, Time, VLANs and AAA
12 WLAN Security
12.1 Weak and Deprecated WLAN Security 12.2 AES, WPA2-Personal and WPA2-Enterprise 12.3 WPA3, SAE and Opportunistic Wireless Encryption 12.4 PMF, Fast Roaming, WIPS and Secure Management
13 RF Validation Surveys and Tools
13.1 Post-Implementation Validation Surveys 13.2 Application and Performance Testing 13.3 Validation Tools: Survey, Protocol and Spectrum
14 Interference, Troubleshooting, and Common Faults
14.1 Co-Channel Contention vs Adjacent Channel Interference 14.2 Protocol Analyzers, Spectrum Analyzers and Monitoring 14.3 Common WLAN Faults and Hidden Nodes
1.2 CWNA-109 Knowledge Domains and Study Strategy
Key Takeaways Explain This Topic AI
The official CWNA-109 objectives table ( https://www.cwnp.com/uploads/cwna-109-objectives-2023.pdf ) weights six domains: RF Technologies 15%, WLAN Regulations and Standards 20%, WLAN Protocols and Devices 20%, WLAN Network Architecture and Design Concepts 15%, WLAN Network Security 10%, and RF Validation and Remediation 20%.
The PDF section-6 heading that says 10% is inconsistent with that table; 15+20+20+15+10+20 = 100, so use 20% for domain 6.
The PHY list stops at Wi-Fi 6E (802.11ax in 6 GHz); Wi-Fi 7 / 802.11be is not a CWNA-109 objective.
Study order: RF math first, then PHYs, MAC, design, security, then validation—hours still follow the six weights, but later domains need the earlier stack.
ExamFinch provides independent practice questions for exam id cwna; this is independent prep by ExamFinch for CWNA-109 topics, not a CWNP-sponsored exam product.
Last updated: September 2026
Why the six domains change what you study
CWNA-109 is a single 60-item vendor-neutral engineering exam. The skills CWNP measures come from a Job Task Analysis ( JTA ) with wireless networking experts ( Certified Wireless Network Experts , CWNEs ) and professionals. The objectives PDF at https://www.cwnp.com/uploads/cwna-109-objectives-2023.pdf (checked 2026-09-20 ) prints a table that distributes questions across six knowledge domains . That table—not a marketing bullet list on a third-party blog—is the weight source this section uses.
Harborline Logistics' Maya has six to ten weeks. If she spends 80% of those weeks on Wi-Fi Protected Access 3 ( WPA3 ) trivia because security feels "advanced," she inverts the blueprint: WLAN Network Security is 10% , the smallest slice. If she skips RF Validation and Remediation because "surveys are a design-pro exam," she gives away a 20% domain. Domain weights tell her where scored minutes go. Learning order is a different question, answered later: she still starts with radio frequency ( RF ) math even though Domain 1 is only 15% , because later domains assume she can read dBm , signal-to-noise ratio ( SNR ), and Equivalent Isotropically Radiated Power ( EIRP ).
This chapter is independent CWNA-109 study material by ExamFinch . It teaches CWNP's published domain names and table percentages. It does not claim CWNP approval, partnership, or exact equivalence with CWNP courseware.
The official table—and the PDF heading trap
Official table percentages (sum 100% ):
- Domain Official title Weight Example X.Y range
- 1 Radio Frequency (RF) Technologies 15% 1.1–1.4
- 2 WLAN Regulations and Standards 20% 2.1–2.7
- 3 WLAN Protocols and Devices 20% 3.1–3.8
- 4 WLAN Network Architecture and Design Concepts 15% 4.1–4.5
- 5 WLAN Network Security 10% 5.1–5.4
- 6 RF Validation and Remediation 20% 6.1–6.6
Add the table: 15 + 20 + 20 + 15 + 10 + 20 = 100 . That arithmetic is why the table is authoritative.
Exam trap: the same PDF's section-6 heading says 10% . That heading is inconsistent with the table. If Maya studies Domain 6 as if it were 10%, she treats a fifth of the exam like a twentieth. Use 20% for Domain 6. Do not "split the difference" to 15%. Do not invent a seventh domain to force a different total.
CWNP does not publish a guaranteed per-form item count per domain. You can build a proportional planning model if you assume 60 equally weighted items:
- 15% of 60 = 9 items (Domains 1 and 4)
- 20% of 60 = 12 items (Domains 2, 3, and 6)
- 10% of 60 = 6 items (Domain 5)
- Check: 9 + 12 + 12 + 9 + 6 + 12 = 60
If Maya wrongly uses the 10% heading for Domain 6, her model drops from 12 validation items to 6 . That is a 50% under-weight of a 20% domain. Keep repeating: this 9/12/6 split is a heuristic , not a CWNP raw cut score. CWNP still does not publish pass rates.
Domain 1 — RF Technologies (15%)
Domain 1 is RF behavior , math , antennas , and accessories . Maya must define wavelength, frequency, amplitude, phase, and sine waves; explain propagation and coverage; and name impairments: reflection, refraction, diffraction, scattering, multipath, voltage standing wave ratio ( VSWR ), return loss, and free space path loss ( FSPL ). She applies RF mathematics: watt and milliwatt, decibel ( dB ), dBm and dBi , noise floor, SNR , received signal strength indicator ( RSSI ), the rules of 10s and 3s , and EIRP . Antenna work includes RF versus physical line of sight, Fresnel clearance, beamwidths, passive gain, polarization, diversity, radio chains, and multiple-input multiple-output ( MIMO ). She must also select omni-directional, semi-directional, and highly directional antennas, read azimuth and elevation charts, and account for cables, connectors, lightning arrestors, grounding, enclosures, and mounting.
Harborline example: a 20 dBm access point ( AP ) radio plus a 6 dBi antenna, ignoring cable loss for a second, is 26 dBm EIRP in that simplified addition. Later chapters grind the 10s and 3s. This section only locks that Domain 1 is the language of every later score report.
Domain 2 — WLAN Regulations and Standards (20%)
Domain 2 is a 20% slice: industry bodies, PHY generations, modulation, channel concepts, Open Systems Interconnection ( OSI ) / TCP/IP layers, regulatory constraints, and use cases. Bodies include IEEE , the Wi-Fi Alliance , the Internet Engineering Task Force ( IETF ), and regulatory agencies. PHY solutions in IEEE 802.11-2020 and amendments run DSSS 802.11 , HR-DSSS 802.11b , OFDM 802.11a , ERP 802.11g , Wi-Fi 4 HT 802.11n , Wi-Fi 5 VHT 802.11ac , Wi-Fi 6 HE 802.11ax on 2.4 and 5 GHz , and Wi-Fi 6E HE 802.11ax on 6 GHz . Spread-spectrum and modulation and coding scheme ( MCS ) topics include DSSS , orthogonal frequency-division multiplexing ( OFDM ), orthogonal frequency-division multiple access ( OFDMA ) and resource units, BPSK , QPSK , and QAM 16/64/256/1024. Functional concepts include primary channels, overlapping basic service set ( OBSS ), adjacent overlapping versus non-overlapping channels, throughput versus data rate, bandwidth, and guard interval. Regulatory work includes bands, available channels, power constraints, indoor/outdoor variants, Dynamic Frequency Selection ( DFS ), and Transmit Power Control ( TPC ). Use cases include basic service set ( BSS ) / extended service set ( ESS ) WLANs, bridging, peer-to-peer, and mesh.
PHY list stop: Wi-Fi 6E, not Wi-Fi 7
The objectives PHY list stops at Wi-Fi 6E . Wi-Fi 7 / 802.11be features such as multi-link operation ( MLO ), 320 MHz channels, and 4096-QAM are not CWNA-109 objectives . Mention them only as post-exam context. If a Harborline vendor slide brags about Wi-Fi 7, Maya still studies 802.11ax in 6 GHz for this sitting.
Domain 3 — WLAN Protocols and Devices (20%)
Domain 3 is the other 20% peer of Domain 2: service sets , Media Access Control ( MAC ) / PHY terminology, frame format and addressing, the three frame types, discovery and association, channel access, MAC operations, and devices. Terms include stations ( STAs ), BSS , service set identifier ( SSID ), basic service set identifier ( BSSID ), ESS , independent basic service set ( IBSS ), distribution system ( DS ), and distribution system media ( DSM ). Framing vocabulary includes MSDU , MPDU , PSDU , PPDU , A-MSDU , A-MPDU , and PHY preamble/header. Channel access includes distributed coordination function ( DCF ), enhanced distributed channel access ( EDCA ), RTS/CTS , CTS-to-Self , network allocation vector ( NAV ), interframe spaces ( SIFS , DIFS , EIFS , AIFS ), and physical versus virtual carrier sense. Devices include APs, WLAN controllers, wireless network management systems, bridge/mesh APs, and clients.
Maya's scanners live in an infrastructure BSS . Confusing SSID (the name humans type) with BSSID (the AP radio's identifier) is a classic Domain 3 miss that later validation work cannot paper over.
Domain 4 — WLAN Network Architecture and Design Concepts (15%)
Domain 4 is 15% : Power over Ethernet ( PoE ), architectures, design scenarios, proprietary features, and supporting network services. PoE includes power source equipment ( PSE ), powered device ( PD ), midspan versus endpoint, power classes, and budgets versus powered port density. Architectures include centralized versus distributed forwarding; control, management, and data planes; scalability and availability; tunneling, quality of service ( QoS ), and VLANs. Design scenarios include data/voice/video, location services, high density, guest/ bring your own device ( BYOD ), and legacy 802.11 clients. Proprietary-feature awareness includes airtime fairness, band steering, dynamic power and channel management, and internal architecture communication. Supporting services include DHCP , DNS , NTP / SNTP , VLANs, RADIUS / LDAP , access control lists, and wired capacity.
Harborline trap: hanging sixty high-power APs on a switch whose PoE budget was sized for twelve phones. That is Domain 4, not "just cabling."
Domain 5 — WLAN Network Security (10%)
Domain 5 is the smallest scored slice at 10% , not a skip. Weak options that should not be used in enterprise WLANs include Wired Equivalent Privacy ( WEP ), Shared Key authentication, SSID hiding as security, MAC filtering, and deprecated WPA / WPA2 with TKIP . Effective mechanisms include Advanced Encryption Standard ( AES ), WPA2-Personal pre-shared key limits, and WPA2-Enterprise with 802.1X , RADIUS, and Extensible Authentication Protocol ( EAP ) methods. WPA3 topics include enhancements versus WPA2, Simultaneous Authentication of Equals ( SAE ), and Opportunistic Wireless Encryption ( OWE ). Tools and options include access control, protected management frames ( PMF ), fast secure roaming, wireless intrusion prevention system ( WIPS ) / rogue detection, protocol and spectrum analyzers, and secure management protocols.
Six proportional items can still fail Maya if she still believes hidden SSIDs are enterprise security. Small weight is not zero weight.
Domain 6 — RF Validation and Remediation (20%)
Domain 6 is 20% in the table. It covers post-implementation validation (coverage, throughput, roaming, connectivity documentation), RF interference including CCC versus overlapping-channel interference and non-802.11 sources, application testing (availability, VoIP, real-time apps, throughput), validation tools (throughput testers, survey software/scanners, protocol analyzers, spectrum analyzers), troubleshooting tools, and common faults: distribution-system throughput / PoE / WAN, SNR/retries/airtime, DHCP/DNS/time, security mismatches, and hidden node.
Maya cannot validate a design she cannot describe in Domain 1–4 language. That is why validation is last in study order even though it is tied for the largest weight.
Recommended study order versus study hours
Hours should roughly follow 15 / 20 / 20 / 15 / 10 / 20. Order should not start with security just because it is fashionable, and should not start with surveys before RF math.
Recommended sequence for Harborline's Maya:
RF math and behavior first (Domain 1). If she cannot move between milliwatts and dBm with the rules of 10s and 3s, every later heat map is decoration.
PHYs and regulations (Domain 2). Legacy through Wi-Fi 6E only. Do not burn a week on 802.11be .
MAC, service sets, and devices (Domain 3). Frames, scanning, association, EDCA , roaming.
Design and architecture (Domain 4). PoE budgets, forwarding planes, voice versus high-density cells, supporting services.
Security (Domain 5). Smaller hour budget, still mandatory: WPA2/WPA3 , SAE , OWE , PMF , WIPS —and what not to use.
Validation and remediation (Domain 6). Surveys, interference classes, application tests, and common faults, now that she can interpret the numbers.
Independent ExamFinch practice questions exist for exam id cwna . Use them to drill weak X.Y areas after you have the stack, not as a substitute for CWNP's 60 presented items and not as a source for unpublished pass rates.
Independent prep path
Resource Who provides it Role
CWNA product page, objectives PDF, exam-update page, Prometric scheduling CWNP / Prometric Official identity, JTA table, delivery, registration
This study guide and ExamFinch practice for cwna ExamFinch Independent prep by ExamFinch for CWNA-109 topics
Register with CWNP. Verify dates on the official pages. Study here for teaching depth. Nothing in this guide replaces the proctored exam.
Blueprint traps
Using the Domain 6 10% heading instead of the table's 20% .
Studying Wi-Fi 7 / 802.11be as if it were a CWNA-109 PHY objective.
- Skipping RF math because Domain 1 is "only 15%."
- Skipping validation because surveys "belong to CWDP."
- Spending most weeks on security because 10% "must be the hard part."
Treating a practice-bank size as the official 60 .
Describing ExamFinch as a CWNP partner or as having CWNP approval it does not have.