- Which CWAP This Cheat Sheet Covers
- The Exam at a Glance: CWAP-405 Facts
- Voucher, Booking and Remote-Proctor Rules
- Domain Weights and Where the Points Are
- Domain 6 Cheat Sheet: 802.11 Frame Exchanges (30%)
- Domain 4 Cheat Sheet: MAC Sublayer and Functions (25%)
- The Four Smaller Domains in One Pass
- Validity and Renewal Rules, Including the Conflicts
- Sequencing Your Review Around the Weights
- Quick-Answer FAQ
- CWAP means Certified Wireless Analysis Professional from CWNP; the current exam is CWAP-405, released April 2025.
- The exam has 60 questions in 90 minutes, and a current, valid CWNA is required to earn the credential.
- 802.11 Frame Exchanges (30%) plus MAC Sublayer and Functions (25%) make up 55% of the objectives.
- The voucher costs $349.99 USD, covers one attempt, and stays valid for two years from purchase.
Which CWAP This Cheat Sheet Covers
Several unrelated credentials share the acronym, so one clarification first. This page covers only the Certified Wireless Analysis Professional, a wireless protocol-analysis certification from CWNP, LLC. If you are still orienting yourself, the explainers on what CWAP is and what CWAP stands for cover the naming and positioning in more depth.
The current version is CWAP-405. Older CWAP-404 and PW0-270 study material describes a previous objective set, so treat anything built on those versions as background reading rather than exam preparation. When a practice question or blog post cites a version, check that it says 405.
The Exam at a Glance: CWAP-405 Facts
| Item | CWAP-405 Fact |
|---|---|
| Issuer | CWNP, LLC (Certified Wireless Network Professional program) |
| Exam code | CWAP-405, released April 2025 |
| Questions | 60 |
| Time limit | 90 minutes |
| Language | English |
| Passing requirement | At least 70%; 80% for instructors |
| Prerequisite | Current, valid CWNA credential |
| Training | Recommended, not mandatory |
| Retake wait after a failed attempt | 10 days |
| Certification validity | Three years (standard) |
A Note on Question Format
CWNP's pages disagree here. The certification page describes multiple-choice/multiple-answer questions, while the voucher page describes multiple-choice/single-answer. Do not assume every item has exactly one correct option. Practice reading each stem for how many selections it asks for, and treat "select all that apply" behavior as possible on exam day.
Voucher, Booking and Remote-Proctor Rules
Money and Timing
- Voucher price: $349.99 USD.
- Coverage: one attempt per voucher.
- Validity: two years from the purchase date, so buy it when you have a realistic exam window, not as a motivational gesture.
A failed attempt means buying another voucher and waiting out the 10-day retake period. The full cost picture, including prerequisite and renewal costs, is in the CWAP certification cost breakdown.
Where You Can Test
You can test at Prometric centers or through CWNP's in-house remote-proctored system. Two dates matter for avoiding stale advice: center testing moved from Pearson VUE to Prometric on August 1, 2024, and the in-house remote option was introduced in November 2025. Any guide telling you to book through Pearson VUE is out of date. Scheduling details are covered in CWAP exam dates and scheduling.
Remote-Proctoring Rules
- Present government-issued identification that matches your registration.
- Use a single monitor.
- Keep your camera and microphone active throughout.
- No outside notes, unrelated applications, or other devices.
- Breaks require proctor acknowledgment and do not stop the exam clock.
That last rule matters for a 90-minute exam. A bathroom break is not free time, so plan your pacing before you sit down.
Domain Weights and Where the Points Are
| Domain | Weight |
|---|---|
| 802.11 Frame Exchanges | 30% |
| MAC Sublayer and Functions | 25% |
| Protocol Analysis | 15% |
| Spectrum Analysis | 10% |
| PHY Layers and Technologies | 10% |
| WLAN Medium Access | 10% |
Two domains carry 55% of the exam. Across 60 questions, that means a large portion of your result depends on reading frames and understanding MAC behavior, not on memorizing spectrum trivia. The complete guide to all six CWAP content areas goes deeper on each objective.
Domain 6 Cheat Sheet: 802.11 Frame Exchanges (30%)
802.11 Frame Exchanges
This is the heaviest domain. Expect questions that show you a sequence of frames, or describe one, and ask what is happening, what is missing, or what comes next.
- Know the typical order of events as a client discovers, joins, and communicates through an access point: discovery, authentication, association, then data exchange.
- Be able to distinguish management, control, and data frames on sight, and know which subtypes belong to which category.
- Understand acknowledgment behavior: which frames are acknowledged, which are not, and what a retry implies.
- Recognize protection and RTS/CTS-style handshakes and why they appear in a capture.
- Know how roaming, power-save signaling, and block acknowledgment sequences look at the frame level.
- Understand how newer-generation (Wi-Fi 6 and Wi-Fi 7) exchanges differ from legacy sequences when you read a trace.
How to Practice This Domain
Reading a description of an association exchange is not the same as spotting it in a trace. Open real captures in Wireshark and apply display filters by frame type and subtype until you can name frames from the Info column without opening every packet. Annotate captures yourself: mark the start of each exchange, the expected response, and any retry. A guided approach to this is covered in the CWAP study guide.
Domain 4 Cheat Sheet: MAC Sublayer and Functions (25%)
MAC Sublayer and Functions
This domain is about what the frame header and its fields mean and how the MAC layer behaves. It pairs naturally with Domain 6, because you need the field-level understanding to interpret the exchanges.
- Frame format: the Frame Control field, its type and subtype bits, and the flags that change how a frame is treated.
- Address fields: how the number and role of addresses change depending on the direction of the frame.
- Duration and sequence information, and what retry flags tell you about the medium.
- Fragmentation, aggregation, and how they appear in a capture.
- Power management signaling and how stations and access points coordinate buffered traffic.
- Information elements carried in management frames and what each communicates about capabilities.
A useful drill: take a single captured frame and explain every bit of the Frame Control field aloud. If you cannot say why the To DS and From DS bits are set the way they are, the address-field questions will be slower than they should be.
The Four Smaller Domains in One Pass
The remaining four domains total 45%, so they are not optional. Together they carry nearly as much weight as the two big domains combined.
Protocol Analysis (15%)
Tool and method knowledge: capturing correctly, filtering, interpreting what an analyzer shows.
- Capture placement, channel selection, and why a capture can miss traffic.
- Display versus capture filters and when each applies.
- Reading analyzer statistics and decoding output without over-trusting it.
Spectrum Analysis (10%)
Interpreting RF activity that a packet capture cannot show.
- Recognizing common interference signatures and what produces them.
- Reading spectrum views such as duty cycle and utilization concepts.
- Knowing when a problem needs a spectrum tool rather than a protocol analyzer.
PHY Layers and Technologies (10%)
How the physical layer shapes what you see in a capture.
- Differences among PHY generations and how they surface in rate and header information.
- Modulation, channel width, and spatial stream concepts as they relate to analysis.
- What PHY headers reveal that the MAC header does not.
WLAN Medium Access (10%)
How stations share the channel, and what that looks like in a trace.
- Contention-based access, interframe spacing, and backoff behavior.
- How collisions, retries, and hidden-node effects appear in captured data.
- Prioritized access and how it changes timing between frames.
Because Medium Access underlies timing, it reinforces the frame-exchange material: a wait you see between two frames in a capture is often explained by interframe spacing rules.
Validity and Renewal Rules, Including the Conflicts
Standard certification validity is three years. There are two routes to renew, and the details are worth knowing before you choose.
| Route | What It Requires |
|---|---|
| Exam-based renewal | A current CWNA plus passing the current CWAP exam; this also renews CWNA for three years |
| Professional-level continuing education (CE) | Elected within one year of certification; eight documented CE hours each year, with two of those hours including passing the annual certification-specific CE eLearning |
CE Route Fine Print
- Election of the CE route is irreversible under the published rules.
- Annual reporting is due by your certification anniversary.
- CE renewal does not automatically extend CWNA, which matters because CWNA is the prerequisite for the whole credential.
Two Conflicts on CWNP's Own Pages
Because of these discrepancies, the safest plan is to track your expiration date early and decide on your renewal route well before it arrives. Prerequisite and eligibility details are collected in CWAP requirements and eligibility.
Sequencing Your Review Around the Weights
You do not need a generic study system here; you need an order that matches the objectives. This is one reasonable sequence for a candidate who already holds a current CWNA.
Protocol Analysis and Tools
- Set up your capture environment and confirm you can capture on a chosen channel.
- Build filter fluency, since every later week depends on it.
MAC Sublayer and Functions
- Decode Frame Control and address fields on real frames.
- Work through fragmentation, aggregation, and power-save signaling.
802.11 Frame Exchanges
- Annotate full exchanges from discovery through data transfer.
- Add newer-generation exchanges once legacy sequences are automatic.
Medium Access, PHY, and Spectrum
- Tie timing and interframe spacing back to captures you have already annotated.
- Finish with a timed set of practice questions.
Why this order: the MAC fields come before frame exchanges because you read exchanges through those fields, and the smaller domains come last because they explain behavior you will already have seen. If you want a sense of how demanding this load feels, see how hard the CWAP exam is. Take timed sets on the CWAP practice test site late in the schedule, and confirm any practice material is written for CWAP-405 specifically.
Quick-Answer FAQ
Yes. A current, valid CWNA credential is required to earn CWAP. Training classes are recommended but not mandatory.
The CWAP-405 exam has 60 questions with a 90-minute limit, delivered in English. Remote-proctor breaks do not pause the clock.
Not necessarily. CWNP's certification page describes multiple-choice/multiple-answer, while the voucher page says multiple-choice/single-answer. Prepare for either and read each stem carefully.
A failed attempt requires a new voucher and a 10-day retake waiting period. Each $349.99 voucher covers one attempt and is valid for two years from purchase.
That depends on your role and goals. Review the ROI analysis, and note that occupational pay and any certification-specific premium are different things; the CWAP salary guide and overview of CWAP-related jobs separate them.
For a broader introduction to the credential itself, start with the CWAP certification overview, then return to this sheet as your pre-exam checklist.