- What the CWAP Certification Actually Is
- The CWNA Prerequisite and Who Should Pursue This Credential
- CWAP-405 Exam Facts at a Glance
- The Six CWAP-405 Domains and What They Demand
- Packet Analysis Skills You Must Be Able to Perform
- Avoiding the Old-Version Trap: CWAP-404 and PW0-270
- Booking: Prometric Centers vs. Remote Proctoring
- Costs, Vouchers, and Retakes
- Sequencing Your Preparation by Domain Weight
- Renewal and Continuing Education
- Careers, Pay, and Where the Credential Fits
- Frequently Asked Questions
- CWAP means Certified Wireless Analysis Professional, a CWNP credential; the current exam is CWAP-405, released April 2025.
- A current, valid CWNA credential is required before you can earn CWAP.
- The exam has 60 questions, a 90-minute limit, and a 70% passing threshold (80% for instructors).
- 802.11 Frame Exchanges (30%) and MAC Sublayer and Functions (25%) together make up 55% of the exam.
What the CWAP Certification Actually Is
The Certified Wireless Analysis Professional credential, administered by CWNP, LLC, validates a specific and demanding skill: reading 802.11 traffic and RF behavior well enough to explain why a wireless network is misbehaving. Where associate-level wireless credentials teach you to design and administer WLANs, CWAP is about forensic work. You capture frames, decode them, trace the exchange that failed, and name the root cause.
If you are still orienting yourself on the terminology, our explainers on what CWAP certification is and what CWAP stands for cover the basics. This article goes deeper into how the CWAP-405 exam is built, what it expects, and how to plan around it.
One identity note matters before you spend money: this site covers the CWNP credential only. Other certifications elsewhere in the industry share the same four letters. Exam fees, domain weights, and renewal rules for those programs have nothing to do with the CWNP exam described here, so always confirm that a study resource names CWNP and the CWAP-405 objectives.
The CWNA Prerequisite and Who Should Pursue This Credential
CWAP is a professional-level credential in the CWNP program, and it is gated: you must hold a current, valid CWNA (Certified Wireless Network Administrator) credential to earn it. Passing the CWAP exam without an active CWNA does not complete the certification. Training classes are recommended but not mandatory, so there is no required course to buy. For a fuller walkthrough of eligibility, see our CWAP requirements guide.
Who benefits most? Candidates who already live in packet captures or want to:
- Wireless engineers who troubleshoot roaming, authentication, and throughput problems and want a credential proving that depth.
- Network support and escalation engineers who receive "Wi-Fi is slow" tickets after tier one has run out of ideas.
- Consultants and integrators who perform post-deployment validation and need defensible evidence in client reports.
- Aspiring CWNP instructors, who face the higher 80% passing threshold.
CWAP-405 Exam Facts at a Glance
| Item | Detail |
|---|---|
| Exam code | CWAP-405 (released April 2025) |
| Questions | 60 |
| Time limit | 90 minutes |
| Language | English |
| Passing requirement | At least 70% (80% for instructors) |
| Prerequisite | Current, valid CWNA |
| Voucher | $349.99 USD, one attempt, valid two years from purchase |
| Delivery | Prometric test centers or CWNP's in-house remote proctoring |
| Retake wait | 10 days after a failed attempt |
Two clarifications keep expectations realistic. First, the 70% and 80% figures are passing thresholds, not pass rates; they tell you the bar, not how many candidates clear it. Our CWAP passing score breakdown and pass rate discussion separate those two ideas carefully.
Second, CWNP's own pages disagree about question format. The certification page describes multiple-choice/multiple-answer items, while the voucher page describes multiple-choice/single-answer. Do not assume every question has exactly one correct option. Practice reading each stem for "select all that apply" language, and treat that ambiguity as a reason to train for both styles.
The Six CWAP-405 Domains and What They Demand
The published CWAP-405 objectives define six domains with exact weights. The weighting is lopsided in a way that should drive your entire plan, which is explored further in our complete guide to the CWAP exam domains.
| Domain | Weight |
|---|---|
| 802.11 Frame Exchanges | 30% |
| MAC Sublayer and Functions | 25% |
| Protocol Analysis | 15% |
| Spectrum Analysis | 10% |
| PHY Layers and Technologies | 10% |
| WLAN Medium Access | 10% |
802.11 Frame Exchanges (30%)
The single largest domain. You must know not just frame types but the sequences in which they appear and what a healthy versus broken sequence looks like.
- Scanning, authentication, and association sequences, including what a failed exchange looks like in a capture.
- Control-frame behavior: acknowledgments, RTS/CTS protection, and block acknowledgment sessions.
- Roaming and reassociation exchanges, including the differences between client-initiated and infrastructure-assisted transitions.
- Power-save signaling and the frames that coordinate buffered delivery.
- Security handshakes as they appear on the air, such as the four-way handshake and the frames around it.
MAC Sublayer and Functions (25%)
This domain is about the structure inside the frames you capture: how fields are organized and what each one tells you.
- Frame control fields, addressing, duration/ID, sequence control, and how address meanings shift depending on direction.
- Management frame bodies and the information elements carried in beacons, probe responses, and association frames.
- Fragmentation, aggregation, retry behavior, and what retry-rate patterns indicate.
- Encryption-related fields and what is and is not visible in a capture of protected traffic.
Protocol Analysis (15%)
The tooling and methodology domain: capturing correctly, filtering intelligently, and interpreting results.
- Capture placement, channel selection, and adapter limitations that cause missing or misleading data.
- Display versus capture filters and building filters that isolate a single client conversation.
- Reading radio metadata such as signal and data-rate information alongside frame content.
Spectrum Analysis (10%)
Reading RF-level evidence rather than frames: duty cycle, utilization, and interference signatures.
- Recognizing common interferer patterns and distinguishing Wi-Fi from non-Wi-Fi energy.
- Interpreting FFT and duty-cycle style views to decide whether a problem is RF or protocol.
PHY Layers and Technologies (10%)
The modulation, channel, and PHY-generation knowledge that lets you interpret rates and capabilities, including modern amendments such as Wi-Fi 6 and Wi-Fi 7.
- How PHY capabilities are advertised in capability elements and what they imply for achievable rates.
- Channel widths, spatial streams, and how OFDMA and related features alter what you see on the air.
WLAN Medium Access (10%)
How stations contend for airtime, which explains many performance complaints that look like "bad signal" but are really contention.
- Interframe spacing, backoff, and EDCA access categories.
- Protection mechanisms and how coexistence with older devices consumes airtime.
Packet Analysis Skills You Must Be Able to Perform
CWAP rewards candidates who have actually opened captures, not just read about them. Reading a frame exchange is a trained skill, and a few hands-on exercises pay off disproportionately.
Annotate a full client lifecycle
Capture one client connecting, passing traffic, and roaming. Then label every frame: probe request, probe response, authentication, association, handshake messages, data, acknowledgments, and the reassociation at the roam. Write one sentence for each stage explaining what the frame accomplishes. This single exercise touches the two heaviest domains.
Hunt for the retry story
Filter for retried frames and ask why. Is the retry rate concentrated on one client, one data rate, or one time window? Learning to turn a retry statistic into a hypothesis (hidden node, interference, weak signal, or protection overhead) mirrors the scenario reasoning the exam favors.
Decode capability elements
Pull a beacon and an association request from a Wi-Fi 6 or Wi-Fi 7 capable environment if you have access to one. Compare what the access point advertises with what the client claims. Mismatches here explain many real-world "why is this client slow" cases, and they connect the PHY and MAC domains.
If you want guided, repeatable practice, our dedicated CWAP training overview outlines the formats available, and the CWAP cheat sheet is useful for last-pass review of frame types and field meanings.
Avoiding the Old-Version Trap: CWAP-404 and PW0-270
Older exam generations circulate widely in forum posts, used books, and cached study sites. The current exam is CWAP-405, and materials built for CWAP-404 or the earlier PW0-270 code were written against different objectives and an earlier technology baseline. Using them blindly creates two problems: gaps on newer content and over-investment in topics that have been de-emphasized.
A practical filter: before trusting any resource, check whether it references the 2025 CWAP-405 objectives and whether it covers contemporary Wi-Fi 6 and Wi-Fi 7 behavior. If a resource predates that, treat it as supplementary background for fundamentals only, and verify every specific claim against the current objectives document. For a structured, current path, start with our CWAP study guide.
Booking: Prometric Centers vs. Remote Proctoring
Delivery options changed recently, and outdated instructions are a common source of confusion. Test-center delivery moved from Pearson VUE to Prometric on August 1, 2024, so ignore any booking walkthrough that mentions Pearson VUE. CWNP also introduced its own in-house remote-proctored option in November 2025.
| Factor | Prometric Test Center | CWNP Remote Proctoring |
|---|---|---|
| Environment | Controlled center setting | Your own space, monitored by camera and microphone |
| Identification | Standard center ID checks | Matching government-issued ID required |
| Equipment | Provided by the center | One monitor only; camera and microphone must stay active |
| Materials | Per center rules | No outside notes, unrelated applications, or other devices |
| Breaks | Per center rules | Require proctor acknowledgment and do not stop the exam clock |
The break rule deserves emphasis for remote candidates: with 90 minutes for 60 questions, the clock keeps running during any approved pause. Plan to finish without needing one. Scheduling specifics and windows are covered in our CWAP exam dates guide.
Costs, Vouchers, and Retakes
The exam voucher costs $349.99 USD. It covers a single attempt and remains valid for two years from the purchase date, which gives you flexibility to buy early without being forced into an immediate test date. Because the voucher covers one attempt only, a failed attempt means purchasing another voucher, and a 10-day waiting period applies before you can retake.
Remember that the real cost of the credential includes the prerequisite: you must hold a current CWNA, so if yours has lapsed or you have not earned it, that effort and expense come first. Optional training classes add to the total but are not required. Our CWAP certification cost breakdown lays out how to budget the full path, and the difficulty guide helps you decide how much preparation to buy before risking a non-refundable attempt.
Sequencing Your Preparation by Domain Weight
You do not need a generic study system here, just a sensible order that matches how the domains build on each other. Because frame exchanges and MAC structure account for 55% of the exam, they deserve the most calendar time, and they are easier to learn once the tooling and PHY basics are in place.
Tooling and Protocol Analysis
- Set up a capture adapter and practice filters until isolating one client is routine.
- Learn what radio metadata your tool exposes and what it cannot see.
MAC Sublayer and Functions
- Memorize the frame control structure and how addressing changes by direction.
- Walk through information elements in beacons and association frames.
802.11 Frame Exchanges
- Annotate full connection, roaming, and power-save captures end to end.
- Study failed exchanges so you can recognize what "wrong" looks like.
Medium Access, PHY, and Spectrum
- Connect contention behavior and PHY capabilities to the performance symptoms in your captures.
- Practice separating RF causes from protocol causes using spectrum views.
Timed review
- Take timed sets of CWAP-405 style questions on the practice test site, then re-read your weakest domain.
Pacing matters on exam day too: 90 minutes across 60 questions leaves about a minute and a half per item on average, so scenario questions that require interpreting a decoded frame should be practiced under time pressure. Use realistic practice questions to build that rhythm.
Renewal and Continuing Education
Standard CWNP certification validity is three years. There are two routes to keep CWAP current, and the choice has consequences.
Exam-based renewal
Hold a current CWNA and pass the current CWAP examination. Doing so also renews CWNA for three years, which is a notable efficiency if both credentials matter to you.
Continuing education route
The optional professional-level CE route must be elected within one year of certification. It requires eight documented CE hours each year, and the published guidelines specify that two of those eight hours must include passing the annual certification-specific CE eLearning. Annual reporting is due by the certification anniversary. Under the published rules, the election is irreversible, and CE renewal does not automatically extend CWNA.
Careers, Pay, and Where the Credential Fits
CWAP signals deep troubleshooting capability, so it tends to be most valuable in roles where someone must resolve problems that standard dashboards cannot explain: wireless engineering, network operations escalation, managed-service and consulting practices, and environments with demanding wireless dependencies such as healthcare, education, logistics, and large venues. Our overview of CWAP jobs maps these roles in more detail.
On pay, be careful to separate two different questions. Wireless network engineers as an occupation earn salaries driven by experience, location, employer type, and scope of responsibility. Whether CWAP itself adds a measurable premium on top of that is a separate and unproven claim; this article does not assert one. A credible read on earnings should start with occupational data and treat any certification effect as a possible edge in hiring and credibility rather than a guaranteed raise. The CWAP salary guide keeps that distinction explicit, and the ROI analysis helps you weigh cost against your own career goals.
Frequently Asked Questions
Yes. A current, valid CWNA credential is required to earn the CWAP certification. Plan for the CWNA first if you do not already hold an active one.
The exam has 60 questions and a 90-minute time limit, delivered in English. Passing requires at least 70%, or 80% for instructors.
The exam voucher costs $349.99 USD, covers one attempt, and is valid for two years from purchase. A failed attempt requires a new voucher and a 10-day wait before retaking.
CWNP's own pages conflict: the certification page describes multiple-choice/multiple-answer, while the voucher page describes multiple-choice/single-answer. Prepare for both styles and read each question stem carefully.
Only as background. The current exam is CWAP-405, built on 2025 objectives, so verify any older material against the current objectives and prioritize resources that cover modern Wi-Fi 6 and Wi-Fi 7 behavior.
Whether you test at a Prometric center or through CWNP's remote proctoring, the winning approach is the same: spend your time where the weights are, 802.11 Frame Exchanges and MAC Sublayer and Functions, and make sure you can read real captures fluently. When you are ready to measure your progress, try the practice questions at CWAP Exam Prep.