AP Networking Wi-Fi and Wireless Troubleshooting Practice Test

1. The application is authorized
2. The SSID is being advertised in range
3. The gateway is reachable
4. The client has a lease

Correct answer: B. The SSID is being advertised in range

Seeing a network name is evidence about advertising, not successful authentication, address assignment, or service access.

1. The WAN default route
2. The DNS A record
3. The authorized security mode and credentials
4. The printer subnet size

Correct answer: C. The authorized security mode and credentials

The reported failure occurs at wireless access authentication. Correct credentials and compatible security settings come before DNS tests.

1. Received signal strength
2. Available DHCP addresses
3. TCP session count
4. DNS cache duration

Correct answer: A. Received signal strength

RSSI measures received radio power. Strong signal does not by itself demonstrate low interference or adequate airtime.

1. Signal level with noise level
2. TCP ports with UDP ports
3. DNS TTL with lease time
4. Private IPs with public IPs

Correct answer: A. Signal level with noise level

Signal-to-noise ratio measures how far signal stands above background noise. It is a radio-quality measure, not an addressing rule.

1. Only IP address space
2. Only DNS names
3. Shared radio airtime
4. Only Ethernet MAC entries

Correct answer: C. Shared radio airtime

Utilization concerns time occupied on the radio channel. Many devices may contend even with distinct IP addresses.

1. DHCP message order
2. The DNS zone serial
3. IPv4 bit length
4. The client's radio path

Correct answer: D. The client's radio path

Distance and building materials can weaken or distort received signals. They do not change the protocol's address length or message sequence.

1. A DHCP reservation number
2. A particular AP radio's network identity
3. The client's subnet mask
4. A DNS search suffix

Correct answer: B. A particular AP radio's network identity

The BSSID identifies the wireless basic service set, often through an AP radio MAC identity. Multiple APs can advertise the same SSID.

1. A router converting IPv4 to IPv6
2. A server changing DNS TTL
3. A switch deleting a VLAN
4. A client changing its AP association

Correct answer: D. A client changing its AP association

Roaming changes the client's attachment within a wireless design. Its impact depends on security, VLAN, and mobility configuration.

1. No; authentication and encryption still matter
2. Yes; it prevents rogue APs
3. Yes; it replaces a passphrase
4. Yes; hidden names cannot be discovered

Correct answer: A. No; authentication and encryption still matter

Suppressing normal name advertisement is not a substitute for secure authentication or encryption. Wireless activity can still reveal network information.

1. The SSID is a subnet mask
2. The SSID labels wireless access; the VLAN defines a logical LAN placement
3. The VLAN determines radio frequency
4. They are always identical numbers

Correct answer: B. The SSID labels wireless access; the VLAN defines a logical LAN placement

Wireless names and logical network membership serve different roles. Their mapping must be inspected rather than assumed.

1. DNS negative-cache count
2. Retry rate
3. Route prefix length
4. DHCP scope size

Correct answer: B. Retry rate

Retries indicate frames needing another transmission attempt. They consume airtime and can occur with interference or poor link conditions.

1. Only the application account
2. Only the advertised SSID name
3. DHCP and the mapped LAN path
4. Only the AP case color

Correct answer: C. DHCP and the mapped LAN path

Association is a wireless-link stage. Address allocation requires the correct VLAN, relay/server path, and scope.

1. Rename every SSID
2. Compare that client in another room and another client in this room
3. Restart every server
4. Change all gateway addresses

Correct answer: B. Compare that client in another room and another client in this room

Controlled client/location comparisons separate endpoint-specific behavior from environmental wireless conditions.

1. Only the Internet subscription
2. Only the public DNS zone
3. The wireless client's radio and LAN attachment
4. Only the server's hostname

Correct answer: C. The wireless client's radio and LAN attachment

The wired test supplies a useful baseline for the same local service. It does not directly validate the wireless access path.

1. Each AP must create a public subnet
2. Each AP erases DNS
3. Every AP reduces cable length
4. The APs can increase contention on shared airtime

Correct answer: D. The APs can increase contention on shared airtime

More radios are not automatically more usable airtime. Channel plan, placement, power, and traffic demand determine the outcome.

1. An additional web-based acceptance or authentication step
2. Fiber connector cleaning
3. A different IPv4 standard
4. A new MAC address for every packet

Correct answer: A. An additional web-based acceptance or authentication step

Portal authorization can restrict application access even after association and addressing succeed.

1. An intentional isolated LAN and access policy
2. A longer network name
3. A different AP brand
4. The word Guest alone

Correct answer: A. An intentional isolated LAN and access policy

A label does not enforce a boundary. Actual VLAN placement, routing policy, and client controls determine access.

1. Only the WAN port speed
2. Only the DHCP lease count
3. The expected server identity and trusted certificate chain
4. Only the SSID's capitalization

Correct answer: C. The expected server identity and trusted certificate chain

Server validation helps avoid sending credentials to an impostor. A familiar SSID does not prove the authentication server is legitimate.

1. It detects a strong signal
2. Further service testing may be needed
3. It may still face interference
4. Its application path has enough capacity and correct policy

Correct answer: D. Its application path has enough capacity and correct policy

Signal bars are a limited radio indicator. They cannot establish address configuration, airtime availability, routing, or service authorization.

1. Declare success from the AP power LED
2. Delete all leases
3. Repeat the relevant client test under comparable conditions
4. Change every resolver

Correct answer: C. Repeat the relevant client test under comparable conditions

Comparable measurements verify whether the placement change addressed the original symptom without importing unrelated changes.

1. DNS record TTL
2. WAN route metric
3. Supported authentication/security mode
4. Printer hostname

Correct answer: C. Supported authentication/security mode

A client must support the access network's security requirements. Correct IP knowledge cannot bypass an unsupported authentication mode.

1. Both always measure identical capacity
2. They exercise different path dependencies
3. DNS converts the wired test to radio
4. Internet tests ignore routers

Correct answer: B. They exercise different path dependencies

A local wired test can isolate radio and LAN behavior, while an Internet test adds shared WAN and remote service conditions.

1. That the AP has a wired connection
2. That one physical dependency works
3. That wireless clients can authenticate and obtain useful service
4. That the local cable negotiated link

Correct answer: C. That wireless clients can authenticate and obtain useful service

An operational wired link is only one part of AP service. Radio, authentication, VLAN placement, and IP services still need checks.

1. Only PoE power
2. Every DNS answer
3. Every client-to-Internet connection
4. Direct communication between wireless clients under the configured design

Correct answer: D. Direct communication between wireless clients under the configured design

Isolation can restrict peer communication while allowing intended upstream access. Its precise scope depends on the platform configuration.

1. IP addresses have different bit lengths at lunch
2. DNS cannot run after school
3. Radio conditions can change with environment and load
4. All APs use one fixed global channel

Correct answer: C. Radio conditions can change with environment and load

Context helps compare intermittent RF and contention behavior instead of attributing every failure to permanent configuration.

1. 55 dB
2. -30 dB
3. 30 dB
4. 140 dB

Correct answer: C. 30 dB

Subtract noise from signal: -55 minus -85 equals 30 dB. Less negative signal values represent greater received power.

1. B
2. They are equal
3. The value cannot be compared numerically
4. A

Correct answer: D. A

The less negative dBm value is stronger. This comparison alone does not determine throughput or noise conditions.

1. Only DNS spelling
2. Only gateway subnet size
3. Only address duplication
4. Interference and contention rather than signal strength alone

Correct answer: D. Interference and contention rather than signal strength alone

Stable received power does not eliminate competing airtime or interference. Compare channel and retry evidence during the affected period.

1. SSID-to-VLAN and DHCP scope placement
2. Only AP power consumption
3. Only the public website certificate
4. Only DNS cache aging

Correct answer: A. SSID-to-VLAN and DHCP scope placement

The received address suggests unintended logical placement. Correct membership before expecting office-versus-guest policy to behave as designed.

1. That client's security support and approved compatibility plan
2. Whether all DNS zones are down
3. Whether the AP has no power
4. Whether /24 has enough bits

Correct answer: A. That client's security support and approved compatibility plan

The selective failure is consistent with a capability mismatch. Do not weaken the whole WLAN without examining authorized alternatives.

1. Cable negotiation at the client NIC
2. IPv4 address allocation
3. Initial radio discovery
4. Portal authorization for the intended access

Correct answer: D. Portal authorization for the intended access

The earlier observations demonstrate attachment and local IP exchange. Portal access policy is an additional application/access stage.

1. The wired uplink is necessarily saturated
2. The AP must have no Ethernet link
3. The shared wireless channel
4. The resolver cannot contain A records

Correct answer: C. The shared wireless channel

The measurements separate radio occupancy from wired-link demand. Investigate airtime and clients before upgrading the uplink alone.

1. A missing route on every device
2. DHCP exhaustion is proved
3. A location-dependent radio-path problem
4. A universal DNS outage

Correct answer: C. A location-dependent radio-path problem

Changing location while keeping the endpoint fixed supports an RF/environment lead. Repeat under comparable conditions and inspect obstructions.

1. The radio channel becomes a VLAN
2. Addressing or session continuity can break after roaming
3. DNS eliminates subnet changes
4. Every client automatically changes TCP addresses transparently

Correct answer: B. Addressing or session continuity can break after roaming

SSID continuity does not guarantee Layer 3 continuity. The roaming design must handle the subnet transition intentionally.

1. The SSID cannot carry data
2. The default route cannot exist
3. Peer traffic may be denied by intended isolation
4. The AP is necessarily broken

Correct answer: C. Peer traffic may be denied by intended isolation

Successful upstream access and restricted peer exchange can be an intentional policy combination. Verify the configured isolation scope.

1. Only AP channel width
2. Only WAN port type
3. Private/randomized MAC behavior and the reservation identifier
4. Only public DNS TTL

Correct answer: C. Private/randomized MAC behavior and the reservation identifier

Client privacy addressing can change allocation identity. Confirm the authorized reservation and client settings before declaring the server broken.

1. Yes; channels supply electrical power
2. Yes; DNS controls PoE
3. No; verify negotiated power and switch budget first
4. No; APs never require power

Correct answer: C. No; verify negotiated power and switch budget first

The reset evidence identifies a power dependency, not an airtime issue. Establish stable power before tuning RF settings.

1. Authentication certificate validity and trust configuration
2. Only DNS negative caching
3. Only DHCP exclusions
4. Only Ethernet speed

Correct answer: A. Authentication certificate validity and trust configuration

The failure follows the identity-validation stage and expiry evidence. Renew and deploy the approved certificate chain appropriately.

1. DNS made the client faster
2. Band/channel conditions can materially affect that client
3. All 2.4 GHz hardware is defective
4. 5 GHz always works through more walls

Correct answer: B. Band/channel conditions can materially affect that client

The tested alternate radio improves this connection under these conditions. It does not establish a universal coverage or compatibility rule.

1. Wider channels bypass authentication
2. Wider channels add usable IPv4 addresses
3. Potential higher peak rate versus fewer independent channel opportunities
4. Wider channels always eliminate interference

Correct answer: C. Potential higher peak rate versus fewer independent channel opportunities

Using more spectrum can affect reuse and contention. Measure the deployment rather than choosing width solely from peak-rate claims.

1. Only the SSID length
2. Only the client signal bars
3. Only DNS TTL
4. The backhaul path

Correct answer: D. The backhaul path

The connection includes both client access and AP backhaul. Strong access signal cannot compensate for a weak required upstream path.

1. Replace every resolver
2. Restore the authorized VLAN path and verify DHCP exchange
3. Increase radio transmit power only
4. Change all server passwords

Correct answer: B. Restore the authorized VLAN path and verify DHCP exchange

Address-allocation messages need the intended logical LAN path. A radio-power change does not repair a missing VLAN.

1. Disable validation for everyone
2. Change the subnet to /16
3. Verify the approved server/certificate configuration before accepting it
4. Trust any familiar SSID

Correct answer: C. Verify the approved server/certificate configuration before accepting it

An identity mismatch can be a misconfiguration or an impostor. Validate the intended trust relationship instead of bypassing it.

1. Retry measurements matter
2. It must be fast because it is near the AP
3. Signal alone is incomplete
4. Contention can affect it

Correct answer: B. It must be fast because it is near the AP

Distance and signal power do not guarantee efficient frame delivery. Shared-channel conditions can dominate performance.

1. Only the original room's walls
2. All DHCP servers at once
3. That laptop's adapter, software, and security profile
4. Every campus switch

Correct answer: C. That laptop's adapter, software, and security profile

The controlled comparison keeps the endpoint as the common factor. Start with endpoint-specific evidence.

1. The AP has clients
2. Demand may change later
3. Airtime saturation
4. Traffic measurements remain useful

Correct answer: C. Airtime saturation

Associated count is not equivalent to active airtime demand. Measure load and retries before diagnosing capacity from a count.

1. Office access failure may reflect intended guest policy
2. DNS cannot work on guest networks
3. The radio is down
4. DHCP failed

Correct answer: A. Office access failure may reflect intended guest policy

The stages can succeed while authorized policy limits destinations. Evaluate the denied access against the design.

1. Only the SSID's text
2. Reassociation/authentication timing and repeated application impact
3. Only the printer MAC
4. Only the WAN subscription price

Correct answer: B. Reassociation/authentication timing and repeated application impact

A brief transition may be expected, but timing and user impact determine whether the roaming behavior needs improvement.

1. Client uplink power and placement also constrain the exchange
2. A VLAN removes wall attenuation
3. DNS increases client transmit power
4. Only AP downlink signals matter

Correct answer: A. Client uplink power and placement also constrain the exchange

Wireless communication is bidirectional. A client may hear an AP that cannot hear the client reliably at the desired distance.

1. Only the first AP's casing
2. Only the site favicon
3. Only DNS MX records
4. SSID deployment, VLAN mapping, and service path on the second AP

Correct answer: D. SSID deployment, VLAN mapping, and service path on the second AP

Matching security is one dependency. Confirm the service is actually deployed and carried correctly on both APs.

1. TCP TTL became 14
2. The subnet lost 20 addresses
3. Signal strength rose 20 dB
4. SNR fell from 34 to 14 dB

Correct answer: D. SNR fell from 34 to 14 dB

The signal is steady but the noise floor rises. Compute both SNR values and investigate the time-correlated noise source.

1. Replace the modem first
2. Run only a public speed test
3. Repeat a local wireless transfer while recording airtime and compare the wired baseline
4. Increase lease length

Correct answer: C. Repeat a local wireless transfer while recording airtime and compare the wired baseline

A local controlled workload removes the external WAN dependency and correlates radio evidence with the symptom.

1. Reviewing slow-client conditions
2. Checking channel reuse
3. Replacing the wired uplink with 10 Gb/s alone
4. Improving airtime usage

Correct answer: C. Replacing the wired uplink with 10 Gb/s alone

The measured bottleneck is radio time, not the lightly loaded wired link. Uplink capacity alone does not reduce radio transmissions.

1. Antenna orientation
2. Channel width
3. The intended VLAN 80 transport path
4. Transmit power

Correct answer: C. The intended VLAN 80 transport path

Authentication success and a missing logical path point to LAN transport. Changing RF cannot restore the VLAN's DHCP and gateway access.

1. All subnet masks
2. Every client's physical NIC
3. B's approved authentication-server registration and shared trust settings
4. The entire DNS zone

Correct answer: C. B's approved authentication-server registration and shared trust settings

The observed rejection concerns the infrastructure identity presenting the request. Compare B with an authorized working AP/controller path.

1. Only the SSID length
2. Only the IP prefix
3. Only DNS TTL
4. Negotiated capabilities, retries, power-saving/driver behavior, and channel conditions

Correct answer: D. Negotiated capabilities, retries, power-saving/driver behavior, and channel conditions

Supported capability is not actual negotiated operation. Inspect the particular client-link state before assuming infrastructure replacement is necessary.

1. The names alone isolate guest users from staff devices
2. The AP can bridge clients
3. Additional policy could be configured
4. Both names can be advertised

Correct answer: A. The names alone isolate guest users from staff devices

Different labels do not establish separate broadcast domains or policy. Verify placement and prohibited access with an actual test.

1. RSSI necessarily became zero
2. DNS TTL changed the mask
3. Its address configuration may no longer match the attached network
4. All DHCP servers are proven down

Correct answer: C. Its address configuration may no longer match the attached network

The radio handoff succeeded, but Layer 3 continuity was not maintained. Check the intended mobility or lease-refresh behavior.

1. Ignore client capabilities
2. Share staff credentials with every guest
3. Identify requirements and provide an approved scoped compatibility approach while preserving stronger access where possible
4. Disable security everywhere

Correct answer: C. Identify requirements and provide an approved scoped compatibility approach while preserving stronger access where possible

Security and compatibility require an intentional supported design. A selective problem does not justify an unbounded downgrade.

1. Accept because the SSID matches
2. Disable certificate checks permanently
3. Verify the expected server identity through the approved support process
4. Change DNS to the offered server

Correct answer: C. Verify the expected server identity through the approved support process

SSID names are reproducible. Unexpected server identity must be resolved before credentials are exposed to that service.

1. Delete all DHCP scopes
2. Rebuild all DNS records
3. Increase WAN speed
4. Locate and characterize the interfering source using time/location evidence

Correct answer: D. Locate and characterize the interfering source using time/location evidence

The correlation points toward an RF source. Further measurements should distinguish the emitter and its effect before changing unrelated services.

1. Only SSID discovery
2. Only AP signal power
3. Only WAN speed
4. Client/relay/server captures across the mapped VLAN

Correct answer: D. Client/relay/server captures across the mapped VLAN

Wireless authorization is demonstrated, but lease completion is not. Follow address-service delivery across observation points.

1. Frames may consume shared airtime on more than one required hop
2. Every mesh link is full-duplex fiber
3. DNS converts gigabits to megabits
4. Only client count matters

Correct answer: A. Frames may consume shared airtime on more than one required hop

Shared radio access and forwarding can consume the same finite time resource. Evaluate hop design and actual payload throughput.

1. DHCP exhaustion is proven
2. The AP must be powered off
3. B's authentication compatibility is a stronger lead than a universal RF outage
4. The WAN link is down

Correct answer: C. B's authentication compatibility is a stronger lead than a universal RF outage

A successful neighboring client is useful radio/service evidence. B's specific authentication error narrows the investigation further.

1. The AP transmit power
2. The advertised SSID visibility
3. The client's received signal
4. The client's ability to transmit back and competing airtime

Correct answer: D. The client's ability to transmit back and competing airtime

One side's transmit change does not guarantee a balanced bidirectional link. Investigate uplink reception and interference separately.

1. Both address-family policies and guest placement
2. Only DNS cache expiry
3. Only WPA passphrase length
4. Only IPv4 lease duration

Correct answer: A. Both address-family policies and guest placement

Wireless access policy must cover actual routed families. IPv4 restrictions do not inherently enforce the same IPv6 boundary.

1. Authentication state at reassociation and the deployed certificate/trust versions
2. Only all DHCP pools
3. Only the WAN route length
4. Only the AP mounting height

Correct answer: A. Authentication state at reassociation and the deployed certificate/trust versions

Existing sessions and new authentication attempts can use different states. Time-correlate the rollout with the failing transition.

1. Management airtime, neighboring activity, and channel reuse
2. Only associated-client count
3. Only the subnet broadcast
4. Only user password age

Correct answer: A. Management airtime, neighboring activity, and channel reuse

Finite airtime includes more than current student payload. Measure actual channel occupancy and sources rather than relying on headcount.

1. An IPv4 /25 boundary
2. DNS negative caching
3. The external website's certificate
4. The supported PoE power allocation and budget

Correct answer: D. The supported PoE power allocation and budget

The repeatable load transition and power log identify a power dependency. A healthy Ethernet link does not prove adequate operating power.

1. Changing RF settings as the primary correction
2. Checking the relevant rule
3. Reviewing intended guest policy
4. Testing the destination port

Correct answer: A. Changing RF settings as the primary correction

Radio and IP exchanges succeeded for the observed tests. Transport-specific denial is closer evidence than an RF hypothesis.

1. All Internet servers
2. The moved port's intended VLAN/trunk and IP path
3. The public DNS zone
4. Every student's password

Correct answer: B. The moved port's intended VLAN/trunk and IP path

The recent common-path change affects multiple services on one AP. Verify its wired/logical attachment before endpoint-wide changes.

1. Only the default DNS TTL
2. Only fiber reach
3. Client privacy behavior and the network's intended identity/lease handling
4. Only the channel width

Correct answer: C. Client privacy behavior and the network's intended identity/lease handling

Association identity and allocation identity can interact. Confirm current client settings and whether the observed changes fit the supported design.

1. Repeat comparable local and remote tests while controlling endpoint, time, and load
2. Change every resolver
3. Replace all antennas immediately
4. Declare the radio defective

Correct answer: A. Repeat comparable local and remote tests while controlling endpoint, time, and load

Uncontrolled comparisons mix server, WAN, load, and radio effects. A controlled baseline makes the inference defensible.

1. A different DNS hostname alone
2. A longer DHCP lease
3. Time-correlated noise/retry measurements with controlled device-on/off tests
4. A new private IP without RF measurements

Correct answer: C. Time-correlated noise/retry measurements with controlled device-on/off tests

Association continuity does not eliminate RF degradation. Controlled time correlation connects the suspected source to measured link behavior.

1. The combined change restored service, but the individual cause remains unresolved
2. The VLAN was proven correct originally
3. Credentials could not have mattered
4. The channel alone was proven wrong

Correct answer: A. The combined change restored service, but the individual cause remains unresolved

Multiple simultaneous changes prevent clean causal isolation. Record the final approved configuration and verify both access and restrictions.