- The Short Answer: What a CWAP Actually Is
- Where CWAP Sits in the CWNP Program
- What a CWAP Analyzes: The Six Exam Domains
- Why Frame Exchanges and MAC Behavior Dominate
- The CWAP-405 Exam: Format, Fees, and Booking
- Prerequisites and Who Should Pursue It
- What a CWAP Does at Work
- Keeping the Credential Current
- A Domain-Ordered Preparation Sequence
- Frequently Asked Questions
- CWAP stands for Certified Wireless Analysis Professional, a CWNP credential focused on analyzing 802.11 networks at the frame and spectrum level.
- The current exam is CWAP-405: 60 questions, 90 minutes, English, with a 70% passing threshold (80% for instructors).
- 802.11 Frame Exchanges (30%) and MAC Sublayer and Functions (25%) together make up 55% of the exam objectives.
- A current, valid CWNA credential is required to earn CWAP, and the exam voucher costs $349.99 USD.
The Short Answer: What a CWAP Actually Is
A CWAP is a Certified Wireless Analysis Professional: someone who has passed the CWAP exam administered by CWNP, LLC and demonstrated the ability to examine wireless LAN behavior at the protocol and RF levels. Where many Wi-Fi credentials emphasize design, deployment, or security policy, the CWAP is about evidence. It validates that you can capture traffic, read frames, interpret what the medium is doing, and explain why a network behaves the way it does.
The credential is often described informally as the "troubleshooting" or "analysis" certification in the CWNP lineup. That shorthand is useful, but the exam is more specific than the nickname suggests. It expects you to understand how 802.11 frames are constructed, how stations contend for the medium, and how exchanges between clients and access points should look when everything works, so that you can recognize what is wrong when it does not.
If you have seen the acronym used for other credentials in other industries, set those aside. This article, and everything on this site, concerns only the CWNP Certified Wireless Analysis Professional. For related definitions, see our explainers on what CWAP stands for and the meaning of CWAP.
Where CWAP Sits in the CWNP Program
CWNP organizes its wireless certifications in tiers. The foundation credential is the Certified Wireless Network Administrator (CWNA). The professional level builds on it with specializations, and CWAP is the specialization devoted to analysis. A current, valid CWNA is a hard requirement to earn CWAP; you cannot sit the exam and receive the credential without it.
That prerequisite shapes the CWAP candidate profile. You are expected to arrive already fluent in WLAN fundamentals: RF behavior, antenna basics, standard amendments, and general architecture. The CWAP exam then assumes that foundation and goes much deeper into how the protocol actually behaves on the air. Our CWAP requirements guide covers eligibility in more detail.
What a CWAP Analyzes: The Six Exam Domains
CWNP publishes six formal exam objectives for CWAP-405, each with an exact weight. Understanding them is the clearest way to understand what the credential actually certifies. For a deeper walkthrough, see our complete guide to all six CWAP content areas.
| Domain | Weight | Core Idea |
|---|---|---|
| 802.11 Frame Exchanges | 30% | Sequences of frames that make associations, data transfers, and power-save behavior work |
| MAC Sublayer and Functions | 25% | Frame formats, fields, addressing, and MAC-layer services |
| Protocol Analysis | 15% | Capture methodology, tools, filters, and interpretation |
| Spectrum Analysis | 10% | Reading RF activity and identifying interference sources |
| PHY Layers and Technologies | 10% | Physical layer characteristics across 802.11 generations |
| WLAN Medium Access | 10% | Contention, access timing, and how stations share the channel |
Protocol Analysis (15%)
This is the hands-on skill domain: how you capture, filter, and interpret traffic.
- Where and how to capture so that you actually see the frames you need
- Reading decodes in an analyzer such as Wireshark and building display filters
- Recognizing the limits of a capture, such as missed frames or single-channel visibility
Spectrum Analysis (10%)
Frame analysis tells you what stations said; spectrum analysis tells you what the air itself looked like.
- Interpreting spectrum views to distinguish Wi-Fi from non-Wi-Fi energy
- Recognizing interference patterns and their likely sources
- Connecting RF observations to symptoms seen in frame captures
PHY Layers and Technologies (10%)
The physical layer determines what rates, modulations, and channel structures are in play, and therefore what a frame's timing and format will look like.
- How PHY characteristics differ across 802.11 generations, including newer Wi-Fi 6 and Wi-Fi 7 capabilities
- How PHY choices show up in captured frames and in airtime consumption
WLAN Medium Access (10%)
Wi-Fi is a shared medium, and the rules for taking turns explain a great deal of real-world behavior.
- Contention-based access, interframe spacing, and backoff behavior
- How medium access interacts with retransmissions and airtime efficiency
Why Frame Exchanges and MAC Behavior Dominate
Look again at the weights. 802.11 Frame Exchanges carries 30% and MAC Sublayer and Functions carries 25%. Together that is 55% of the exam objectives. This is the single most important fact about how the CWAP is scored, and it should drive how you allocate your time.
The MAC Sublayer and Functions domain
This domain is about the structure of what is on the air. A candidate should be able to look at a frame and understand its frame control field, the meaning of its address fields in different distribution contexts, and the purpose of management, control, and data frame types and subtypes. Knowing why a field exists is what lets you spot when its value is wrong.
The 802.11 Frame Exchanges domain
Individual frames are only half the story. Frame exchanges are the choreographed sequences: probing and discovery, authentication and association, the handshakes that establish security, data delivery with acknowledgments, and the exchanges that support power management and roaming. On the exam, you may be asked to identify what step is missing from a sequence, which frame should come next, or what a particular exchange tells you about client or AP behavior.
Because these two domains outweigh the rest combined, they deserve the largest share of your lab time. Our CWAP study guide expands on how to turn that weighting into a study plan, and our CWAP cheat sheet condenses the must-know facts for last-minute review.
The CWAP-405 Exam: Format, Fees, and Booking
The concrete mechanics of the exam are worth knowing before you commit.
- Exam code: CWAP-405, released April 2025.
- Length: 60 questions in 90 minutes, delivered in English.
- Passing score: at least 70%, or 80% for instructors. These are passing thresholds, not pass rates. See our CWAP passing score guide for details.
- Voucher cost: $349.99 USD, covering one attempt and valid for two years from purchase. Our CWAP certification cost breakdown covers the wider budget.
- Retakes: a 10-day waiting period applies after a failed attempt.
- Training: classes are recommended but not mandatory.
Where you can test
Candidates can test at Prometric centers or through CWNP's in-house remote-proctored system. Center testing moved from Pearson VUE to Prometric on August 1, 2024, and the in-house remote option was introduced in November 2025. If you find older instructions that mention Pearson VUE booking, treat them as obsolete.
Remote proctoring rules
If you choose the remote route, plan your environment carefully. Candidates must present matching government-issued identification, use a single monitor, and keep the camera and microphone active. Outside notes, unrelated applications, and other devices are not permitted. Breaks require proctor acknowledgment and do not stop the exam clock, so a 90-minute exam stays a 90-minute exam regardless of interruptions. For scheduling considerations, see our CWAP exam dates guide.
A note on question format
CWNP's own pages are not perfectly consistent here. The certification page describes multiple-choice and multiple-answer questions, while the voucher page describes multiple-choice with single answers. Rather than assume every item has exactly one correct option, prepare for both styles and read each question's instructions carefully. When a question asks you to choose more than one answer, partial understanding will not be enough.
Prerequisites and Who Should Pursue It
The formal prerequisite is simple: a current, valid CWNA. There is no mandatory course and no separate experience gate in the published requirements. In practice, though, the exam rewards people who have spent real time looking at captures.
| Candidate Background | How CWAP Fits |
|---|---|
| WLAN engineers who troubleshoot client and roaming issues | Formalizes and deepens the frame-level skills they already use informally |
| Network engineers moving from wired to wireless | Builds on CWNA foundations with a protocol-analysis mindset they will recognize |
| Wi-Fi support and escalation specialists | Provides a structured method for proving root cause instead of guessing |
| Trainers and instructors | Instructors face an 80% passing threshold rather than 70% |
If you are weighing whether the investment makes sense, read our analyses on whether the CWAP is worth it and how hard the exam is. Be cautious with salary claims: a wireless network engineer's pay reflects the occupation, location, and experience, and any extra premium attributable specifically to the certification is difficult to prove. Our CWAP salary guide separates those two ideas.
What a CWAP Does at Work
The credential maps onto a recognizable set of workplace tasks. Employers who value it tend to be those running dense or demanding wireless environments, plus the integrators and consultants who support them. You can browse typical roles in our overview of CWAP jobs.
- Root-cause analysis: proving whether a connectivity complaint stems from authentication failures, roaming delays, retransmissions, or interference.
- Validation: confirming that a new deployment behaves the way its design intended, frame by frame.
- Vendor escalation: supplying captures and annotated evidence that make a support case actionable.
- Security investigation: recognizing anomalous management traffic or unexpected exchanges.
- Performance tuning: identifying airtime waste caused by low rates, excessive management overhead, or contention.
Key Takeaway
The CWAP rewards the habit of verifying. If your instinct when a client misbehaves is to capture the exchange and read it, you already think the way the exam expects. If your instinct is to adjust a setting and hope, the credential will push you to build a better method.
Keeping the Credential Current
CWAP certification is valid for three years. There are two published ways to renew.
- Exam route: hold a current CWNA and pass the current CWAP exam. Doing so also renews CWNA for three years.
- Continuing education route: an optional professional-level CE program that must be elected within one year of certification. It requires eight documented CE hours each year, and the guidelines specify that two of those eight hours must include passing the annual certification-specific CE eLearning. Annual reporting is due by the certification anniversary.
Be careful with the CE route. Election is irreversible under the published rules, and CE renewal does not automatically extend your CWNA. CWNP's own materials also contain a few inconsistencies worth noting: the live CE page lists a $115 annual fee while the linked professional-level guidelines list $125, so confirm the applicable amount before paying. Likewise, the live page and the guidelines' overview say an expired certification requires the current exam, while a detailed section of the guidelines describes a 30-day CE reinstatement window. Do not assume a grace period exists; get confirmation from CWNP directly if your credential is close to lapsing.
A Domain-Ordered Preparation Sequence
Rather than a generic schedule, tie your calendar to the exam weights. This sequence front-loads the skills that everything else depends on and reserves the heaviest domains for the longest lab time.
Protocol Analysis and capture setup
- Build a working capture workflow and practice display filters in Wireshark
- Learn what your adapter and channel choices let you see, and what they hide
MAC Sublayer and Functions
- Dissect frame control, addressing, and type/subtype fields in real captures
- Annotate frames by hand until the field meanings are automatic
802.11 Frame Exchanges
- Capture and narrate discovery, association, security handshakes, and data delivery
- Practice identifying the missing or out-of-order step in a sequence
WLAN Medium Access, PHY, and Spectrum
- Connect timing and contention rules to airtime behavior
- Compare PHY characteristics across generations and relate spectrum views to frame symptoms
Timed practice and gap review
- Work CWAP-405-aligned practice questions under the 90-minute limit
- Revisit the heaviest domains where your scores are weakest
When you are ready to test yourself, use the CWAP practice test to check your readiness against the six domains, and read our discussion of pass-rate data for a realistic view of what published information does and does not tell you. If you want structured instruction, our overview of CWAP training options covers the recommended-but-optional classroom route. For a broader definition of the credential, our CWAP certification explainer is a good companion read.
Frequently Asked Questions
CWAP stands for Certified Wireless Analysis Professional. It is a CWNP credential, administered by CWNP, LLC, that validates the ability to analyze 802.11 WLANs at the protocol and spectrum level.
A current, valid CWNA credential is required to earn CWAP. Training classes are recommended but not mandatory, and there is no separate published experience requirement beyond that prerequisite.
The exam has 60 questions with a 90-minute limit, delivered in English. Passing requires at least 70%, or 80% for instructors. These are passing thresholds, not published pass rates.
The exam voucher costs $349.99 USD, covers one attempt, and is valid for two years from purchase. A failed attempt is followed by a 10-day retake waiting period, which would require a new voucher purchase for the next attempt.
802.11 Frame Exchanges is the largest at 30%, followed by MAC Sublayer and Functions at 25%, together 55% of the objectives. Protocol Analysis is 15%, while Spectrum Analysis, PHY Layers and Technologies, and WLAN Medium Access are 10% each.
Yes. CWNP introduced an in-house remote-proctored option in November 2025, alongside testing at Prometric centers. Remote candidates need matching government-issued ID, a single monitor, and an active camera and microphone, and breaks do not pause the exam clock.