CWAP Exam Domains 2026: Complete Guide to All 6 Content Areas

The CWAP-405 Blueprint at a Glance

The Certified Wireless Analysis Professional (CWAP) is a CWNP credential built around one core skill: looking at what is actually happening on a wireless network and explaining it. The current exam, CWAP-405, was released in April 2025, and its objectives define six content areas with published weights. If you are still deciding whether the credential fits your career, start with What Is CWAP Certification?; this guide assumes you are ready to study.

These six lines are the formal exam objectives, and the weights are the exact published figures. Treat the table as your allocation guide: it tells you where marks live and, by extension, where your hours should go.

Why Two Domains Carry 55% of the Exam

Many candidates open the objectives, see six domains, and spread their study time evenly. That is the most common planning mistake. Domain 6 (30%) and Domain 4 (25%) together account for 55% of the exam, which on a 60-question test means a majority of items probe frame-level knowledge. The other four domains share the remaining 45%.

This does not mean the 10% domains can be ignored. With a 70% passing threshold, a domain you skip entirely can cost you more than you can afford to give back. Think of them as points you must collect efficiently rather than topics to master exhaustively. For a broader read on how demanding the whole exam is, see How Hard Is the CWAP Exam?

Domain 6: 802.11 Frame Exchanges (30%)

This is the largest domain and the one that most directly reflects what a wireless analyst does all day: read a capture and determine what happened, in what order, and whether it was correct.

How this domain is tested

Expect scenario thinking rather than recitation. A question may describe a sequence of observed frames and ask what is missing, what is out of order, or what a given frame implies about the preceding step. The skill being measured is pattern recognition: you should be able to look at a described exchange and know instantly whether it is healthy.

Wireshark is the right training ground

The fastest way to internalize frame exchanges is to capture them yourself. Capture a client connecting to your own access point, then annotate every frame: who sent it, who received it, what it requests or answers, and what the next frame should be. Repeat with a roam, a disconnect, and a power-save scenario. This kind of hands-on annotation is what separates candidates who recognize sequences from those who merely memorized lists. Our CWAP study guide outlines how to fold these captures into a full preparation plan.

Domain 4: MAC Sublayer and Functions (25%)

If Domain 6 is about sequences, Domain 4 is about the building blocks of each frame. Here you need to read a frame the way you read a sentence: knowing the grammar of its fields and what each one signals.

Domains 4 and 6 reinforce each other. A frame-exchange question often requires you to decode a field to decide what happens next, and a MAC question often assumes you know where the frame sits in a sequence. Study them in the same weeks. A tight one-page cheat sheet of frame types and key fields is a useful companion once you have done the underlying work.

Domain 1: Protocol Analysis (15%)

Protocol Analysis is the tooling and methodology domain. Where Domains 4 and 6 test what is on the wire, this one tests how you get it off the wire and make sense of it.

This domain rewards real lab time more than reading. If you have only ever reviewed pre-made capture files, set up your own capture environment before exam day. Candidates who have fought with a capture that "didn't show what it should" understand the limits of analysis far better than those who have not.

Domains 2, 3 and 5: The 10% Content Areas

Domain 2: Spectrum Analysis (10%)

This domain covers interpreting RF activity beyond what 802.11 frames reveal. The key idea is that a protocol capture cannot see non-Wi-Fi interference or raw channel conditions, so spectrum tools fill the gap. Focus on recognizing what different RF signatures represent, relating spectrum observations to symptoms seen in captures, and knowing when each tool is the right one to reach for.

Domain 3: PHY Layers and Technologies (10%)

PHY Layers and Technologies covers the physical-layer characteristics and technologies that determine how data is transmitted. Study how different 802.11 PHY generations differ, including the newer Wi-Fi 6 and Wi-Fi 7 era features, and how those differences show up in what an analyst observes. The goal is not engineering-level signal theory but the ability to connect PHY capabilities to behavior you can see and measure.

Domain 5: WLAN Medium Access (10%)

WLAN Medium Access addresses how stations share the air: contention, backoff, interframe spacing concepts, and how access mechanisms influence throughput and latency. It pairs naturally with Domain 4, since duration and retry information in the MAC header often explain medium-access behavior. Study it alongside the frame content rather than as a separate theory unit.

Sequencing Your Preparation by Domain

Generic scheduling advice matters less than ordering topics by dependency and weight. One workable arrangement for a six-week plan follows; adjust the pace to your own background and see the full study guide for more detail.

When you are ready to test yourself, use the CWAP practice test and track results per domain rather than as a single score. A strong overall percentage can hide a weak Domain 6, which is exactly where you cannot afford a gap.

Exam Format and Logistics That Shape Your Prep

The domains only matter if you can perform under exam conditions, so several logistical facts should inform how you practice.

• Length and time: 60 questions in 90 minutes, delivered in English.
• Passing threshold: at least 70%, or 80% for instructors. This is a passing requirement, not a pass rate; for what the available data can and cannot say, see CWAP Pass Rate 2026 and the dedicated passing score guide.
• Question format: CWNP's certification page describes multiple-choice/multiple-answer questions, while the voucher page describes multiple-choice/single-answer. Because the issuer's descriptions differ, do not assume every item has exactly one correct option. Practice reading each question for how many selections it asks for.
• Prerequisite: a current, valid CWNA credential is required to earn CWAP. Details are in CWAP Requirements.
• Cost and validity: the voucher is $349.99 USD, covers one attempt, and is valid for two years from purchase. A full breakdown is in CWAP Certification Cost.
• Retakes: a 10-day waiting period applies after a failed attempt.
• Delivery: testing is available at Prometric centers or through CWNP's in-house remote-proctored system. Center testing moved from Pearson VUE to Prometric on August 1, 2024, so ignore any older booking instructions that mention Pearson VUE.

If you test remotely

Remote candidates must present matching government-issued identification, use a single monitor, and keep the camera and microphone active. Outside notes, unrelated applications, and other devices are not allowed. Breaks require proctor acknowledgment and do not pause the exam clock, so with only 90 minutes, plan your pacing so that you rarely need one. Timing practice at roughly one and a half minutes per question is a sensible target.

Avoiding Outdated CWAP-404 and PW0-270 Materials

CWAP-405 replaced earlier exam versions, and study resources written for CWAP-404 or the older PW0-270 exam may not align with the 2025 objectives. Differences can include emphasis, terminology, and coverage of newer Wi-Fi generations. Using older material is not automatically fatal, since the underlying 802.11 fundamentals persist, but it can leave you under-prepared on current content and over-invested in topics that no longer carry the same weight.

Protect yourself with a simple habit: map every resource you use back to the six CWAP-405 domain names and weights. If a book chapter or video does not clearly correspond to one of them, treat it as supplementary. The official objectives document on CWNP's site is your authority; the version-update page there is worth checking before you commit to a study resource.

Where the Domains Show Up in Real Work

The exam objectives mirror daily responsibilities for wireless engineers and troubleshooters. Frame-level fluency (Domains 4 and 6) is what lets someone diagnose a roaming failure or an authentication problem from a capture rather than guessing. Spectrum and PHY knowledge help separate an RF problem from a protocol problem. Employers looking for this skill set tend to be organizations that run complex or high-density wireless environments and need people who can resolve problems that standard dashboards cannot explain. To explore this side, see CWAP Jobs, and for earnings context that separates occupational pay from any certification premium, read the CWAP Salary Guide and Is the CWAP Certification Worth It?

After You Pass: Renewal at a Glance

Standard certification validity is three years. The exam-based renewal route requires a current CWNA and passing the current CWAP exam, which also renews CWNA for three years. An optional continuing-education route must be elected within one year of certification and requires eight documented CE hours each year. CWNP's published materials list conflicting renewal-fee figures and describe reinstatement differently in different places, so confirm the current amount and any reinstatement window directly with CWNP before paying or relying on a grace period.

Frequently Asked Questions