Identify Wireless Hardware and Software
Domain 3, Identify Wireless Hardware and Software, tests whether you can select and place APs, antennas, power components, controllers, and analysis tools, and explain how each affects security.
Access points and controllers
- Autonomous APs are configured individually; lightweight APs use a controller and CAPWAP to centralize configuration, RF management, and security policy.
- Cloud-managed and controller-less architectures move control to a cloud dashboard or distributed coordination; the security trade-off is dependency on WAN/cloud reachability.
- PoE simplifies AP placement: 802.3af supplies up to 15.4 W at the PSE (12.95 W at the PD), 802.3at up to 30 W (25.5 W at the PD), and 802.3bt up to 90 W. Check the switch's total power budget, not just per-port capability.
Antennas and cabling
- Omnidirectional antennas cover a floor area; semi-directional patch/panel antennas cover hallways or one side of a wall; highly directional Yagi and parabolic antennas support bridges.
- Gain is not free power: it reshapes the pattern. Higher gain narrows beamwidth and can create coverage holes.
- Use low-loss coax, correct connectors (N, RP-SMA), and minimize cable runs; every connector and adapter adds loss.
Software and tools
- Spectrum analyzers find interference; protocol analyzers such as Wireshark decode 802.11 frames; site survey software validates coverage, SNR, and roaming.
- WIPS/WIDS, NAC, RADIUS, PKI, and MDM enforce identity, posture, and rogue detection.
Worked example
A 24-port PoE switch has a 370 W budget. You plan 20 APs. At 802.3af (12.95 W at the AP), demand is 259 W, leaving 111 W. If you choose 802.3at APs drawing 25.5 W, demand is 510 W, which exceeds the budget. The correct answer is to reduce AP count, use af-capable APs, or add a second switch-not to assume every port can deliver 30 W simultaneously.
Traps that cost marks
- Confusing PSE budget with PD draw.
- Choosing the highest-gain antenna for every case.
- Ignoring cable and connector loss.
- Treating a spectrum analyzer as a substitute for a protocol analyzer.