CWTS common mistakes
CWTS · Understand the traps and how to avoid them.
Treating the CWTS as a vendor-neutral 'Wi-Fi basics' quiz and answering questions about 802.11 frame types, management frames, and PHY layers from general networking intuition rather than from the standard's actual definitions.
Most candidates arrive from a Cisco, Ubiquiti, or Aruba operational background where they learned device-specific behavior. The CWTS tests generic 802.11 concepts (beacons, probes, authentication/association, ACK, RTS/CTS, modulation and coding), and vendor habit often conflicts with the standards wording.
What to do instead
Rebuild your mental model from the IEEE 802.11 MAC and PHY layer descriptions: list each management, control, and data frame type with its purpose, then map each to a real capture you have seen. Practice explaining why a frame exists in the standard, not how a particular AP implements it.
Memorizing frequency and channel numbers without being able to convert between channel, center frequency, and wavelength, or to state which channels are non-overlapping in 2.4 GHz versus 5 GHz versus 6 GHz.
Candidates learn a short list of 'good channels' (1, 6, 11) by rote and never internalize the 5 MHz channel spacing in 2.4 GHz or the 20 MHz bonding rules in 5 GHz and 6 GHz. Exam items then ask for a frequency, a wavelength, or a valid channel plan and the memorized list does not generalize.
What to do instead
Practice the arithmetic until it is automatic: 2.4 GHz channel 1 center at 2412 MHz with 5 MHz steps; 5 GHz channel 36 at 5180 MHz with 20 MHz steps; 6 GHz starting at 5955 MHz. Compute wavelength from frequency (about 12.5 cm at 2.4 GHz, 5.2 cm at 5.8 GHz) and verify your channel plans against the actual band edges.
Confusing dB, dBm, and dBi in link-budget questions, and adding gains and losses in linear units instead of decibels.
The logarithmic nature of the decibel is easy to state and hard to use under time pressure. Candidates mix absolute power (dBm) with relative gain (dBi, dB) and then cannot explain why a 3 dB increase doubles power while a 10 dB increase multiplies it by ten.
What to do instead
Drill the rules: +3 dB is 2x power, +10 dB is 10x power, +6 dB is 2x distance in free space. Work five complete link budgets end to end (transmit power, cable loss, antenna gain, free-space path loss, receiver sensitivity) and keep units labeled on every line.
Answering RF propagation items by assuming higher transmit power always improves the link, ignoring noise floor, SNR, and co-channel interference.
Operational habit says 'turn up the power to fix coverage.' The exam instead tests SNR, noise floor, and the effect of raising power on adjacent cells and on the interference a client causes. Candidates who reason only in signal strength pick the wrong answer.
What to do instead
Frame every RF question in terms of SNR (signal minus noise in dB) rather than raw RSSI. Practice scenarios where increasing AP power raises both signal and interference, and identify when the correct action is to lower power, change channel width, or reduce cell size.
Treating a site survey as a coverage check with a single walk-around, rather than distinguishing a predictive (planning) survey, a passive survey, and an active survey, and knowing which data each produces.
Many candidates have only done informal walk-throughs with a phone app. They do not separate design validation from post-installation verification, and they cannot say what an active survey measures that a passive survey does not.
What to do instead
Learn the three survey types with their inputs and outputs: predictive uses floor plans and RF modeling before installation; passive records ambient RF from the environment; active associates to the network and measures actual throughput, retries, and roaming. Practice describing the deliverable of each and when each is required.
Designing or evaluating an AP placement without accounting for mounting height, antenna orientation, attenuation from walls and metal, and capacity (client density) in addition to coverage.
Candidates focus on 'can I see a signal' and forget that a survey must satisfy both coverage and capacity. They also place APs at ceiling height with downtilted antennas in a way that creates coverage holes in high-ceiling or warehouse spaces.
What to do instead
For each placement exercise, state the target RSSI, the SNR target, the expected client count per AP, and the material attenuation values you are applying (for example drywall versus concrete versus metal shelving). Check antenna pattern orientation against mounting height before finalizing.
Confusing the roles of WLC, lightweight versus autonomous APs, CAPWAP, and PoE when answering hardware and software items, or assuming a controller is required for every deployment.
The exam covers both controller-based and controller-less architectures. Candidates who work in one environment generalize it to all, and they mix up what CAPWAP carries (control and data tunnels) with what it does not (client authentication).
What to do instead
Build a comparison table of autonomous AP, lightweight AP with WLC, and cloud/controller-less APs across configuration, roaming, and management. For CAPWAP, state explicitly which traffic is tunneled in each mode and what PoE class or standard (802.3af, 802.3at, 802.3bt) supplies which power budget.
Answering security questions by naming a protocol (WPA2, WPA3, 802.1X) without being able to say what threat it addresses and what it does not, such as confusing encryption with authentication or assuming WPA3-Personal removes the need for strong passphrases.
Security items reward precise distinctions: PSK versus 802.1X/EAP, SAE versus the WPA2 four-way handshake, TKIP versus CCMP, and management frame protection. Candidates who know only the acronyms cannot discriminate between the plausible options.
What to do instead
For each mechanism, write one sentence on the attack it prevents and one on what remains exposed. Compare WPA2-Personal, WPA2-Enterprise, WPA3-Personal (SAE), and WPA3-Enterprise side by side, and note where PMF (802.11w) and rogue-AP detection fit.
Diagnosing connectivity problems by jumping to the AP or the radio, without a layered method that checks association state, DHCP, DNS, authentication, and RF in order.
Troubleshooting items present a symptom and several plausible causes. Candidates who lack a consistent order of operations pick the most familiar cause rather than the one the evidence supports, and they skip client-side and upstream network checks.
What to do instead
Use a fixed sequence: can the client see the SSID, associate, authenticate, obtain an IP via DHCP, resolve DNS, and reach the gateway? At each step name the tool or log that confirms it (association logs, DHCP lease, ping, packet capture). Practice narrating this sequence for five different symptoms.
Ignoring regulatory and compliance context: treating channel availability, transmit power limits, DFS, and country codes as implementation details rather than exam-relevant constraints.
Candidates configure equipment in one regulatory domain and assume those channels and power levels are universal. Exam items test why a channel is unavailable in a region, what DFS requires, and why a mismatched country code causes problems.
What to do instead
Learn the concept of regulatory domains and why they change the allowed channel set and EIRP. Study DFS operation (radar detection, channel vacate, and why it causes brief outages) and the practical consequence of an incorrect country setting on an AP. Tie each rule back to a real deployment decision.