CWS Certified Wound Specialist Exam — Questions and Answers
Question 1: Which type of antenna radiates RF energy equally in all directions in the horizontal plane?
- Omnidirectional (Correct answer)
- Directional
- Yagi
- Parabolic
Correct answer: Omnidirectional
Omnidirectional antennas radiate energy equally around 360° in the horizontal plane.
Question 2: Which factor has the GREATEST impact on 5 GHz signal attenuation compared to 2.4 GHz in office environments?
- 5 GHz signals are more susceptible to rain fade outdoors
- Higher frequency signals experience greater material penetration loss through walls (Correct answer)
- 5 GHz channels are narrower, reducing effective throughput
- 5 GHz APs consume more power and overheat faster
Correct answer: Higher frequency signals experience greater material penetration loss through walls
Higher frequencies lose more energy when passing through building materials, meaning 5 GHz signals attenuate more rapidly than 2.4 GHz through walls and floors.
Question 3: Which finding on a wound culture is most clinically significant when determining treatment for a chronic wound?
- Polymicrobial growth with no clinical signs of infection
- Growth of beta-hemolytic Streptococcus at any level (Correct answer)
- Any growth of Staphylococcus epidermidis
- Light growth of Candida species
Correct answer: Growth of beta-hemolytic Streptococcus at any level
Beta-hemolytic Streptococcus (Groups A, B, C, G) is pathogenic at any level and consistently associated with impaired wound healing and clinical infection.
Question 4: Which moist wound healing principle does a hydrogel dressing PRIMARILY provide?
- Antimicrobial protection
- Donation of moisture to dry wounds (Correct answer)
- Absorption of heavy exudate
- Mechanical debridement
Correct answer: Donation of moisture to dry wounds
Hydrogels have a high water content (up to 96%) that donates moisture to dry or minimally exudating wounds, facilitating autolytic debridement.
Question 5: A single wireless client cannot connect to the WLAN while all other clients work fine. What should be checked first?
- Client's wireless adapter drivers and settings (Correct answer)
- DHCP pool exhaustion
- Core switch uplink capacity
- AP channel settings
Correct answer: Client's wireless adapter drivers and settings
When only one client is affected, the issue is likely specific to that device's wireless adapter, drivers, or configuration rather than a network-wide problem.
Question 6: To allow edema, infection, or exudate to drain, such wounds are left open for 3 to 5 days.
- Primary healing
- Tertiary healing (Correct answer)
- Quaternary healing
- Secondary healing
Correct answer: Tertiary healing
Tertiary healing, also known as delayed primary closure, involves leaving a wound open for 3 to 5 days to allow for drainage of edema, infection, or exudate. Once the risk of complications has subsided, the wound edges are then surgically approximated for closure.
Question 7: A security analyst finds clients connecting to an AP with a stronger signal but no certificate validation prompt. What attack is most likely occurring?
- Beacon stuffing
- MAC spoofing
- SSL stripping on wired side
- Evil twin AP with no server cert validation by clients (Correct answer)
Correct answer: Evil twin AP with no server cert validation by clients
An evil twin AP can impersonate the legitimate AP and, if clients do not validate server certificates, successfully intercept EAP credentials or traffic.
Question 8: An organization is migrating to WPA3-Personal security. What is the primary authentication method that replaces the Pre-Shared Key (PSK) handshake used in WPA2-Personal to provide stronger protection against offline dictionary attacks?
- Extensible Authentication Protocol (EAP)
- Advanced Encryption Standard (AES)
- Temporal Key Integrity Protocol (TKIP)
- Simultaneous Authentication of Equals (SAE) (Correct answer)
Correct answer: Simultaneous Authentication of Equals (SAE)
WPA3-Personal replaces the PSK authentication method of WPA2 with Simultaneous Authentication of Equals (SAE). SAE is resistant to offline dictionary attacks because it requires a live interaction with the access point for each password guess, making it significantly more difficult for an attacker to crack the password. AES is an encryption cipher, TKIP is an older, less secure protocol, and EAP is a framework used in Enterprise modes.
Question 9: Which modulation scheme encodes data by shifting the phase of the carrier signal?
- PSK (Phase-Shift Keying) (Correct answer)
- FSK (Frequency-Shift Keying)
- ASK (Amplitude-Shift Keying)
- OOK (On-Off Keying)
Correct answer: PSK (Phase-Shift Keying)
PSK encodes information by varying the phase of the carrier wave rather than its amplitude or frequency.
Question 10: What is the purpose of antenna beamforming in modern WLAN systems?
- To physically rotate the antenna toward the client
- To combine 2.4 GHz and 5 GHz signals into a single beam
- To increase the operating frequency of the radio
- To focus transmitted energy toward a specific client using phase manipulation (Correct answer)
Correct answer: To focus transmitted energy toward a specific client using phase manipulation
Beamforming uses signal phase adjustments across multiple antenna elements to constructively focus energy toward a targeted client, improving signal strength and reducing interference.
Question 11: A wireless engineer notices that as the frequency of an RF signal increases, its wavelength __________.
- decreases (Correct answer)
- becomes unstable
- remains the same
- increases
Correct answer: decreases
Frequency and wavelength are inversely proportional. As the frequency (the number of cycles per second) of an RF signal increases, the physical distance of each wave (the wavelength) becomes shorter.
Question 12: What identifier uniquely distinguishes one BSS from another at Layer 2?
- SSID
- BSSID (Correct answer)
- ESSID
- HESSID
Correct answer: BSSID
The BSSID is a 48-bit MAC address that uniquely identifies a single BSS at Layer 2.
Question 13: In RF terminology, what does EIRP stand for?
- Equivalent Integrated RF Power
- Equivalent Isotropic Received Power
- Effective Internal Radiated Power
- Effective Isotropic Radiated Power (Correct answer)
Correct answer: Effective Isotropic Radiated Power
EIRP is Effective Isotropic Radiated Power, representing the total power an antenna would emit if it radiated equally in all directions.
Question 14: When performing a site survey in a building with multiple floors, what critical factor must be accounted for regarding RF propagation?
- Vertical signal propagation always doubles the path loss compared to horizontal
- Signals only travel horizontally and never penetrate floors
- Each floor operates on a completely isolated RF spectrum by regulation
- Inter-floor signal bleed can cause co-channel interference between vertically adjacent APs (Correct answer)
Correct answer: Inter-floor signal bleed can cause co-channel interference between vertically adjacent APs
RF signals pass through floors and ceilings, so APs on adjacent floors on the same channel can interfere with each other, requiring 3D channel planning.
Question 15: What does the term 'antenna diversity' refer to in WLAN systems?
- Supporting multiple Wi-Fi standards on one antenna
- Employing multiple antennas and selecting the best signal to reduce multipath fading (Correct answer)
- Using antennas of different frequencies simultaneously
- Installing antennas at different heights
Correct answer: Employing multiple antennas and selecting the best signal to reduce multipath fading
Antenna diversity uses two or more antennas and dynamically selects or combines the one(s) receiving the strongest signal to combat multipath fading.
Question 16: Which wireless hardware component is responsible for converting digital data into radio frequency signals for transmission?
- Wireless LAN controller
- PoE injector
- Ethernet switch port
- RF transceiver (radio) (Correct answer)
Correct answer: RF transceiver (radio)
The RF transceiver (radio) in an access point performs the digital-to-analog conversion and modulates data onto the carrier frequency for transmission over the air.
Question 17: What is the primary purpose of 802.11w (Management Frame Protection)?
- Increasing beacon interval to reduce overhead
- Protecting management frames from spoofing and replay attacks (Correct answer)
- Enabling fast BSS transition between APs
- Encrypting data frames with AES-256
Correct answer: Protecting management frames from spoofing and replay attacks
802.11w adds cryptographic protection to unicast and some multicast management frames to prevent deauthentication and disassociation spoofing.
Question 18: Which 802.11 amendment introduced the 6 GHz band (Wi-Fi 6E) and is particularly beneficial for reducing interference in dense survey environments?
- 802.11ac (Wi-Fi 5)
- 802.11n (Wi-Fi 4)
- 802.11ax (Wi-Fi 6/6E) (Correct answer)
- 802.11g
Correct answer: 802.11ax (Wi-Fi 6/6E)
802.11ax (Wi-Fi 6E) extends operation into the 6 GHz band, which is currently free of legacy devices, providing a clean spectrum environment for new deployments.
Question 19: Which component of the wound bed preparation concept does the 'M' in TIME represent?
- Moisture balance
- Maceration control
- Microbiological management
- Moisture imbalance (Correct answer)
Correct answer: Moisture imbalance
In the TIME framework, M stands for Moisture imbalance, addressing wounds that are too dry or too wet to heal optimally.
Question 20: Which connector type is most commonly found on consumer-grade WLAN access points for external antenna attachment?
- TNC
- RP-SMA (Correct answer)
- BNC
- N-type
Correct answer: RP-SMA
Reverse Polarity SMA (RP-SMA) connectors are the industry standard on consumer and prosumer WLAN equipment for antenna connections.
Question 21: Which 802.11 MAC layer mechanism is specifically designed to address the hidden node problem by reserving the medium before data transmission?
- Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA)
- Block Acknowledgment (BlockAck)
- Request to Send/Clear to Send (RTS/CTS) (Correct answer)
- Distributed Coordination Function (DCF)
Correct answer: Request to Send/Clear to Send (RTS/CTS)
Request to Send/Clear to Send (RTS/CTS) is a mechanism used in 802.11 networks to mitigate the hidden node problem. A station sends an RTS frame, and the access point responds with a CTS frame. All stations hearing the CTS frame, even those that did not hear the original RTS, will defer their transmissions, thus reserving the medium for the requesting station.
Question 22: Which 802.11 feature allows an AP to steer a dual-band capable client from 2.4 GHz to 5 GHz?
- DFS (Dynamic Frequency Selection)
- BST (Band Steering Technology)
- BSS Transition Management (802.11v) (Correct answer)
- TPC (Transmit Power Control)
Correct answer: BSS Transition Management (802.11v)
802.11v BSS Transition Management lets APs send suggestions or requests to clients to transition to a different BSS, which can include steering to a less congested or higher-frequency band.
Question 23: In 802.11e/WMM, what replaces the standard DIFS as the mandatory idle time before a station transmits in a QoS-enabled network?
- EIFS
- PIFS
- AIFS (Arbitration Inter-Frame Space) (Correct answer)
- SIFS
Correct answer: AIFS (Arbitration Inter-Frame Space)
AIFS (Arbitration Inter-Frame Space) replaces DIFS in EDCA; each Access Category has its own AIFS value, with higher-priority ACs using shorter AIFS values.
Question 24: Which 802.11 PHY layer mode is used when legacy 802.11b devices must coexist with 802.11g devices on the same BSS?
- ERP-OFDM only mode
- ERP mixed mode with CTS-to-self or RTS/CTS protection (Correct answer)
- DSSS-CCK high-rate mode
- HR-DSSS compatibility mode
Correct answer: ERP mixed mode with CTS-to-self or RTS/CTS protection
When 802.11b clients are present, 802.11g APs activate ERP protection using CTS-to-self or RTS/CTS to prevent legacy devices from transmitting during OFDM frames.
Question 25: What does 'channel reuse' mean in the context of a Wi-Fi site survey design?
- Assigning every AP in a building to the same channel to simplify management
- Reusing 2.4 GHz channels in the 5 GHz band for backward compatibility
- Using the same frequency channel on geographically separated APs that won't interfere with each other (Correct answer)
- Recycling old APs from a previous installation to reduce costs
Correct answer: Using the same frequency channel on geographically separated APs that won't interfere with each other
Channel reuse assigns the same channel to APs that are far enough apart that their signals don't overlap, maximizing spectrum efficiency across a large deployment.
Question 26: An organization has identified that its most critical application is inventory management, which runs on older barcode scanners that only support 802.11b/g. According to best practices, this device is known as the 'Least Capable, Most Important' (LCMI) device. How should this information primarily influence the WLAN design?
- The entire network must be configured to operate only in the 2.4 GHz band.
- The organization must immediately replace all older scanners with newer models.
- Security should be disabled on the 2.4 GHz band to ensure compatibility.
- The network design must ensure adequate coverage and performance specifically for these legacy devices. (Correct answer)
Correct answer: The network design must ensure adequate coverage and performance specifically for these legacy devices.
The concept of the Least Capable, Most Important (LCMI) device dictates that the network must be designed to support its requirements. Since the scanners are critical, the design must ensure that the 2.4 GHz coverage is sufficient and that data rates and other parameters are configured to provide reliable performance for these 802.11b/g devices, even if it means not optimizing the network solely for newer, faster clients.
Question 27: Which of the following is a critical factor determined by the wireless client device's capabilities, rather than the access point's configuration, that directly impacts its ability to connect to a network?
- The DHCP lease time
- Support for specific frequency bands (2.4 GHz, 5 GHz, 6 GHz) (Correct answer)
- The transmit power of the BSS
- The SSID broadcast setting
Correct answer: Support for specific frequency bands (2.4 GHz, 5 GHz, 6 GHz)
A client device must have the correct radio hardware to operate on the frequency bands used by the wireless network. For example, a 2.4 GHz-only client cannot connect to an SSID that is broadcast only on the 5 GHz or 6 GHz bands. While APs are configured to operate on specific bands, the client's physical ability to use those bands is inherent to its own hardware.
Question 28: Converting 100 mW to dBm gives which value?
- 10 dBm
- 30 dBm
- 100 dBm
- 20 dBm (Correct answer)
Correct answer: 20 dBm
dBm = 10 × log10(100 mW / 1 mW) = 10 × log10(100) = 10 × 2 = 20 dBm.
Question 29: Periwound skin that appears dark purple, boggy, and non-blanchable in a patient on a pressure relief surface MOST likely represents:
- Moisture-associated skin damage (MASD)
- Unstageable pressure injury
- Deep tissue pressure injury (DTPI) (Correct answer)
- Stage 2 pressure injury
Correct answer: Deep tissue pressure injury (DTPI)
Dark purple, non-blanchable, boggy periwound tissue is the hallmark of deep tissue pressure injury caused by internal tissue damage from sustained pressure.
Question 30: The ideal position to avoid developing a pressure ulcer is:
- supine position on alternating pressure mattress
- prone position on alternating pressure mattress
- 90-degree lateral side-lying position, turning every 2 hours
- 30-degree tilt position, turning at least every 2 hours (Correct answer)
Correct answer: 30-degree tilt position, turning at least every 2 hours
The 30-degree tilt position is ideal because it distributes pressure away from bony prominences like the greater trochanter, shifting weight to the fleshy part of the buttock. Turning at least every two hours is crucial to prevent prolonged pressure on any single area, allowing for reperfusion and reducing the risk of tissue ischemia and breakdown, which are precursors to pressure ulcers.
Question 31: Which statement correctly describes 802.11 frame aggregation?
- A-MSDU and A-MPDU bundle multiple frames to reduce per-frame overhead (Correct answer)
- Frame aggregation was introduced in 802.11ac, not 802.11n
- It combines multiple IP packets into a single TCP segment
- Aggregation is only supported in the 5 GHz band
Correct answer: A-MSDU and A-MPDU bundle multiple frames to reduce per-frame overhead
A-MSDU (Aggregate MAC Service Data Unit) and A-MPDU (Aggregate MAC Protocol Data Unit) were introduced in 802.11n to bundle frames, reducing header and acknowledgment overhead.
Question 32: A company wants to enhance its WLAN security by protecting against deauthentication and disassociation attacks, which can be used to disrupt wireless service. Which IEEE 802.11 amendment specifically addresses this by providing protection for management frames?
- 802.11w (Correct answer)
- 802.11e
- 802.11k
- 802.11r
Correct answer: 802.11w
The IEEE 802.11w amendment, also known as Protected Management Frames (PMF), is designed to protect certain types of management frames, including deauthentication and disassociation frames, from being spoofed. This prevents attackers from forging these frames to disconnect legitimate clients from the network. 802.11r is for fast BSS transition, 802.11k for radio resource measurement, and 802.11e for Quality of Service.
Question 33: What is the effect of increasing antenna cable length on an RF link?
- Increases EIRP by boosting signal strength
- Increases antenna gain to compensate for the longer run
- Has no effect if the cable is rated for RF use
- Increases insertion loss, reducing effective transmit power (Correct answer)
Correct answer: Increases insertion loss, reducing effective transmit power
Longer cables have more resistive and dielectric losses, reducing the power delivered from the radio to the antenna.
Question 34: A user's laptop, which supports 802.11g, is connecting to an 802.11b access point. What is the MAXIMUM data rate the user can expect to achieve?
- 2 Mbps
- 54 Mbps
- 600 Mbps
- 11 Mbps (Correct answer)
Correct answer: 11 Mbps
When a newer standard device connects to an older standard access point, the connection operates at the capabilities of the older, slower standard due to backward compatibility. Since the access point is 802.11b, the maximum data rate for the entire connection is limited to the 11 Mbps supported by 802.11b, even though the laptop is capable of the 54 Mbps offered by 802.11g.
Question 35: During the process of connecting to a Wi-Fi network, what is the first type of active frame a client device typically sends to discover available access points?
- Authentication Frame
- Beacon Frame
- Probe Request (Correct answer)
- Association Request
Correct answer: Probe Request
While clients can passively listen for Beacon frames sent by APs, the active discovery process involves the client sending a Probe Request frame. Any APs that hear this request and are configured to respond will send a Probe Response frame back to the client.
Question 36: A CWS candidate reviews a WLAN deployment using WPA2-Enterprise with PEAP-MSCHAPv2. What critical client-side configuration is required to prevent credential theft?
- Disabling automatic reconnection to the SSID
- Validating the RADIUS server's certificate and pinning the CA (Correct answer)
- Enabling MAC address randomization on client devices
- Configuring static IP addresses instead of DHCP
Correct answer: Validating the RADIUS server's certificate and pinning the CA
Without validating the RADIUS server certificate on the client, an attacker running a rogue RADIUS server can intercept MSCHAPv2 credentials via a man-in-the-middle attack.
Question 37: What effect does increasing antenna height above ground level typically have on a WLAN outdoor deployment?
- Narrows the horizontal beam width
- Increases coverage range by reducing obstructions (Correct answer)
- Decreases EIRP output
- Reduces Fresnel zone clearance
Correct answer: Increases coverage range by reducing obstructions
Greater antenna height reduces the impact of ground-level obstructions and improves Fresnel zone clearance, extending effective range.
Question 38: In 802.1X authentication, what is the role of the supplicant?
- The client device requesting network access (Correct answer)
- The device granting network access after RADIUS approval
- The AP acting as a policy enforcement point
- The RADIUS server validating credentials
Correct answer: The client device requesting network access
The supplicant is the client device (e.g., laptop or phone) that requests access to the network and provides credentials during 802.1X authentication.
Question 39: An organization wants to upgrade its wireless network to support the highest possible data rates and the latest security protocol, WPA3. Which Wi-Fi generation, also known as an IEEE 802.11 standard, should they implement?
- Wi-Fi 6 (802.11ax) (Correct answer)
- Wi-Fi 5 (802.11ac)
- Wi-Fi 3 (802.11g)
- Wi-Fi 4 (802.11n)
Correct answer: Wi-Fi 6 (802.11ax)
Wi-Fi 6, based on the IEEE 802.11ax standard, offers the highest theoretical data rates and introduced mandatory support for the WPA3 security protocol, providing more robust security. While Wi-Fi 5 (802.11ac) offers high speeds, it primarily operates in the 5 GHz band and WPA3 support was not mandatory. Wi-Fi 4 and Wi-Fi 3 are older standards with lower speeds and less advanced security features.
Question 40: The 802.11e amendment primarily addressed which aspect of wireless networking?
- Quality of Service (QoS) (Correct answer)
- Security enhancements
- Frequency band expansion
- Power save mechanisms
Correct answer: Quality of Service (QoS)
802.11e added QoS mechanisms including EDCA and HCCA to prioritize traffic types such as voice and video.
Question 41: What is the primary purpose of a PoE (Power over Ethernet) injector in a WLAN deployment?
- To deliver electrical power to an AP over the Ethernet cable (Correct answer)
- To provide VLAN tagging for wireless traffic
- To convert fiber optic signal to Ethernet
- To boost Wi-Fi signal strength
Correct answer: To deliver electrical power to an AP over the Ethernet cable
A PoE injector adds DC power onto an Ethernet cable, allowing an access point to receive both data and power through a single cable.
Question 42: A wireless client shows 'Limited Connectivity' despite successfully associating with the AP. What is the most likely cause?
- Weak RF signal below -80 dBm
- DHCP failure or IP address conflict (Correct answer)
- Mismatched SSID name
- Incorrect WPA2 passphrase
Correct answer: DHCP failure or IP address conflict
'Limited Connectivity' means Layer 2 association succeeded but IP address assignment failed, pointing to a DHCP issue.
Question 43: When comparing a Yagi antenna and a patch antenna, which statement is generally true?
- Patch antennas offer higher gain and a narrower beamwidth than Yagi antennas.
- Yagi antennas are omnidirectional, while patch antennas are directional.
- Yagi antennas typically provide higher gain and a more focused beam for longer-distance links compared to patch antennas. (Correct answer)
- Patch antennas are physically larger and more obtrusive than Yagi antennas.
Correct answer: Yagi antennas typically provide higher gain and a more focused beam for longer-distance links compared to patch antennas.
Yagi antennas are designed with a driven element, a reflector, and multiple director elements that focus the RF energy in a specific direction, resulting in high gain and a narrow beamwidth suitable for long-distance communication. Patch antennas are also directional but generally have a wider beamwidth and lower gain, making them more suitable for covering a specific area at a shorter to medium range.
Question 44: In a CWS context, what does the term 'RF jamming' describe as a wireless threat?
- An attacker injecting malformed 802.11 frames to crash APs
- ARP broadcast storms on the wired uplink
- Deliberate interference on the wireless spectrum to cause a denial of service (Correct answer)
- Sending oversized EAP identity responses
Correct answer: Deliberate interference on the wireless spectrum to cause a denial of service
RF jamming is a physical-layer DoS attack where a device transmits interference signals on the same frequency band, disrupting legitimate wireless communications.
Question 45: An RF signal travels between a transmitter and receiver. As it propagates through the air, it encounters a large, smooth metal-paneled building. Which of the following RF behaviors is MOST likely to occur?
- Absorption
- Reflection (Correct answer)
- Diffraction
- Scattering
Correct answer: Reflection
Reflection occurs when an RF wave strikes a smooth surface that is large relative to the wavelength of the signal. A metal-paneled building is a prime example of such a surface, causing the signal to bounce off.
Question 46: What is the purpose of the 802.11k Radio Resource Management (RRM) amendment?
- Manage power allocation across multiple radios on an AP
- Mandate minimum EIRP levels for outdoor deployments
- Enable STAs to report channel and neighbor AP measurements to aid roaming decisions (Correct answer)
- Define spectrum mask requirements for each PHY type
Correct answer: Enable STAs to report channel and neighbor AP measurements to aid roaming decisions
802.11k allows APs to collect radio measurement reports from clients, providing neighbor lists and signal data that help clients make smarter, faster roaming decisions.
Question 47: A patient develops callus formation around a plantar neuropathic ulcer. What is the primary reason to debride the callus?
- Callus increases plantar pressure by up to 30% and impedes wound healing (Correct answer)
- Callus removal is purely for patient comfort
- Callus improves pressure distribution and should be preserved
- Callus beneath the surface harbors bacteria that cause osteomyelitis
Correct answer: Callus increases plantar pressure by up to 30% and impedes wound healing
Callus acts as a rigid foreign body that increases focal plantar pressure by up to 30%, impeding epithelialization and contributing to ulcer persistence.
Question 48: What is the maximum number of spatial streams supported by an 802.11ac Wave 2 (Wi-Fi 5) client device?
- 2
- 4 (Correct answer)
- 8
- 16
Correct answer: 4
802.11ac Wave 2 supports up to 4 spatial streams for SU-MIMO, while MU-MIMO supports up to 4 simultaneous clients.
Question 49: Which element in a 802.11 Beacon frame tells clients the interval at which Beacons are transmitted?
- Beacon Interval field (Correct answer)
- DTIM Count field
- Capability Information field
- TIM (Traffic Indication Map) element
Correct answer: Beacon Interval field
The Beacon Interval field specifies the time between successive Beacon transmissions in units of Time Units (TUs), where 1 TU = 1024 microseconds.
Question 50: What effect does increasing channel width from 20 MHz to 40 MHz have on throughput and noise?
- No change in either
- Higher throughput and lower noise floor
- Lower throughput and higher noise floor
- Higher throughput and higher noise floor (Correct answer)
Correct answer: Higher throughput and higher noise floor
Doubling channel width doubles data capacity but also captures more ambient noise, raising the noise floor by ~3 dB.
Question 51: Subcutaneous tissue may be damaged or necrosed during full-thickness skin loss.
- Stage I
- Stage II
- Stage III (Correct answer)
- Stage IV
Correct answer: Stage III
A Stage III pressure ulcer involves full-thickness skin loss where subcutaneous fat may be visible, but bone, tendon, or muscle are not exposed. Damage or necrosis of subcutaneous tissue is a defining characteristic of this stage, indicating a deeper level of tissue destruction.
Question 52: Which of the following is a Layer 2 WLAN troubleshooting issue?
- Failed DNS query to external server
- Authentication or association failure with the AP (Correct answer)
- IP address conflict between two clients
- Default gateway unreachable from client
Correct answer: Authentication or association failure with the AP
Authentication and association are Layer 2 (MAC layer) processes; failures at this stage prevent the client from completing the wireless connection.
Question 53: A university is designing a WLAN for a large lecture hall that will host over 300 students, each using a laptop for online activities. Which organizational goal is the MOST critical to address in this high-density environment?
- Aesthetic integration of APs
- Coverage
- Capacity (Correct answer)
- Power over Ethernet (PoE) efficiency
Correct answer: Capacity
In a high-density environment like a lecture hall, the primary goal is capacity. Capacity planning ensures the network can handle the large number of simultaneous connections and the aggregate throughput demands of many users and their applications. While coverage (signal presence) is necessary, it is secondary to ensuring the network has enough capacity to serve all connected devices effectively.
Question 54: Which assessment scale specifically measures pressure injury risk using criteria such as sensory perception, moisture, activity, mobility, nutrition, and friction/shear?
- PUSH Tool
- Braden Scale (Correct answer)
- Waterlow Score
- Norton Scale
Correct answer: Braden Scale
The Braden Scale evaluates six subscales—sensory perception, moisture, activity, mobility, nutrition, and friction/shear—to quantify pressure injury risk.
Question 55: Which organizational WLAN goal focuses on ensuring employees can move throughout a building without losing connectivity?
- Security compliance
- High availability
- Seamless roaming (Correct answer)
- Bandwidth optimization
Correct answer: Seamless roaming
Seamless roaming ensures clients can transition between access points without noticeable interruption to their connection.
Question 56: What is the maximum theoretical throughput of 802.11g?
- 54 Mbps (Correct answer)
- 11 Mbps
- 22 Mbps
- 72 Mbps
Correct answer: 54 Mbps
802.11g achieves a maximum PHY rate of 54 Mbps using OFDM in the 2.4 GHz band, matching the speed of 802.11a in the 5 GHz band.
Question 57: A patient has a fistula connecting the bowel to the skin surface. Which type of wound management system is MOST appropriate?
- Standard foam dressing
- Pouching system with skin barrier wafer (Correct answer)
- Negative pressure wound therapy without modification
- Hydrocolloid dressing changed daily
Correct answer: Pouching system with skin barrier wafer
Enterocutaneous fistulas produce enzymatic, high-volume output requiring a pouching system with a skin barrier wafer to protect periwound skin and accurately measure output.
Question 58: A manufacturing plant needs its WLAN to support automated guided vehicles (AGVs). Which WLAN goal is MOST critical for this use case?
- Maximum downlink throughput only
- Predictable, low-latency connectivity with no coverage gaps (Correct answer)
- Minimizing the number of access points
- Open authentication for easy onboarding
Correct answer: Predictable, low-latency connectivity with no coverage gaps
AGVs require consistent, low-latency connections without roaming disruptions to navigate safely and reliably.
Question 59: What is the hidden node problem in a WLAN?
- A client assigned a private IP hidden from the router
- Two clients that can hear the AP but cannot hear each other, causing collisions at the AP (Correct answer)
- An AP that does not broadcast its SSID beacon
- An AP using non-standard channel settings
Correct answer: Two clients that can hear the AP but cannot hear each other, causing collisions at the AP
The hidden node problem occurs when two clients can both communicate with the AP but are out of range of each other, causing simultaneous transmissions and collisions at the AP.
Question 60: An organization plans to implement a Voice over Wi-Fi (VoWiFi) system for its employees who move throughout a large warehouse. Which two WLAN design goals are MOST important for ensuring reliable call quality and preventing dropped calls?
- Location tracking and network segmentation
- Seamless roaming and QoS (Correct answer)
- High throughput and guest access
- Device onboarding and aesthetic design
Correct answer: Seamless roaming and QoS
For real-time applications like VoWiFi, seamless roaming is crucial to hand off calls between access points without interruption as users move. Quality of Service (QoS) is essential to prioritize voice traffic over less time-sensitive data, ensuring low latency and jitter, which directly impacts call quality.
Question 61: During a security audit, a junior technician discovers a consumer-grade wireless access point connected to a corporate network switch port in the marketing department. This AP was not installed by the IT team. How is this type of unauthorized device BEST classified?
- Misconfigured AP
- Ad-hoc network
- Rogue Access Point (Correct answer)
- Evil Twin AP
Correct answer: Rogue Access Point
A Rogue Access Point is any wireless access point connected to a wired network without authorization from the network administrator. This scenario perfectly describes a rogue AP, which creates a significant security vulnerability by bypassing corporate network security controls. An Evil Twin impersonates a legitimate AP, while an ad-hoc network is a peer-to-peer connection between clients without an AP.
Question 62: A wireless technician is installing an access point in a large, open office to provide 360-degree coverage. Which antenna polarization is most commonly used for this type of indoor omnidirectional deployment?
- Slant Polarization
- Horizontal Polarization
- Vertical Polarization (Correct answer)
- Circular Polarization
Correct answer: Vertical Polarization
Vertical polarization is most commonly used for omnidirectional antennas in typical WLAN deployments. The antennas on client devices are often vertically oriented, and matching the polarization of the transmitter and receiver antennas is crucial for optimal signal strength. A mismatch, such as one antenna being vertical and the other horizontal, can cause significant signal loss.
Question 63: Which TXOP parameter in WMM defines the maximum time a station may transmit after winning channel access?
- CWmin
- AIFSN
- TXOP Limit (Correct answer)
- CWmax
Correct answer: TXOP Limit
The TXOP Limit sets the maximum duration a station can hold the channel and transmit a burst of frames after winning the contention.
Question 64: The MOST effective nutritional supplement supported by evidence for pressure injury prevention and healing is:
- Omega-3 fatty acids only
- Iron supplementation regardless of serum levels
- Vitamin D alone
- Arginine, zinc, and vitamin C combined (Correct answer)
Correct answer: Arginine, zinc, and vitamin C combined
Combination supplements containing arginine (supports collagen and nitric oxide production), zinc (cofactor for cell proliferation), and vitamin C (collagen hydroxylation) have the strongest evidence.
Question 65: Which of the following BEST describes 'multipath' in RF propagation and its effect on Wi-Fi?
- Signal loss that only occurs in outdoor point-to-point links
- RF signals reflecting off surfaces and arriving at the receiver at different times, causing distortion (Correct answer)
- The process of bonding multiple Wi-Fi channels to increase throughput
- A routing protocol that sends packets over multiple network paths simultaneously
Correct answer: RF signals reflecting off surfaces and arriving at the receiver at different times, causing distortion
Multipath occurs when RF signals reflect off walls, floors, and objects, arriving at slightly different times and potentially causing destructive interference or 'dead spots.'
Question 66: Which channel access method is mandatory for all 802.11 STAs and serves as the baseline for medium contention?
- HCF (Hybrid Coordination Function)
- PCF (Point Coordination Function)
- DCF (Distributed Coordination Function) (Correct answer)
- EDCA (Enhanced Distributed Channel Access)
Correct answer: DCF (Distributed Coordination Function)
DCF is the mandatory baseline medium access method based on CSMA/CA with random backoff, required for all 802.11 compliant stations.
Question 67: In legacy 802.11 Power Save Mode (PSM), how does a sleeping station learn that the AP has buffered frames waiting for it?
- The station checks the Traffic Indication Map (TIM) in the beacon (Correct answer)
- The AP broadcasts an ATIM frame
- The station listens for a PS-Poll acknowledgment
- The AP sends a unicast wake-up frame directly to the client
Correct answer: The station checks the Traffic Indication Map (TIM) in the beacon
The AP includes a TIM (Traffic Indication Map) in each beacon; a sleeping station wakes up periodically to read the beacon and checks whether its AID bit is set, indicating buffered frames.
Question 68: What tool is primarily used to identify non-802.11 RF interference sources in a WLAN environment?
- Protocol analyzer
- Packet sniffer
- WLAN scanner app
- Spectrum analyzer (Correct answer)
Correct answer: Spectrum analyzer
A spectrum analyzer detects all RF energy across frequency bands, including non-802.11 sources like microwave ovens and Bluetooth devices.
Question 69: Which RF phenomenon is primarily responsible for indoor 'dead spots' where signal strength drops sharply despite short distances from the AP?
- Multipath destructive interference (Correct answer)
- Free-space path loss
- Antenna polarization mismatch
- Atmospheric absorption
Correct answer: Multipath destructive interference
Indoor dead spots are typically caused by multipath signals arriving out of phase and canceling each other through destructive interference.
Question 70: Which EAP method uses a TLS tunnel to protect inner authentication and only requires a server-side certificate?
- PEAP (Correct answer)
- EAP-TLS
- EAP-MD5
- LEAP
Correct answer: PEAP
PEAP creates an encrypted TLS tunnel using only a server certificate, then authenticates the client via an inner method like MS-CHAPv2.
Question 71: When a roaming client re-associates from one AP to another within the same ESS, which parameter must remain the same for the roam to succeed transparently?
- BSSID
- Channel number
- Security cipher suite and SSID (Correct answer)
- SSID
Correct answer: Security cipher suite and SSID
For a successful roam within an ESS, both the SSID and the security/encryption parameters must match across APs, while the BSSID will differ.
Question 72: A client reports slow Wi-Fi despite strong signal. A spectrum analyzer shows high non-Wi-Fi interference at 2.4 GHz. What is the best client-side workaround?
- Switch the client to the 5 GHz band (Correct answer)
- Reduce the client transmit power
- Enable WMM on the client
- Increase the RTS threshold on the client
Correct answer: Switch the client to the 5 GHz band
Moving the client to 5 GHz avoids the congested 2.4 GHz band where microwave ovens and Bluetooth create interference.
Question 73: An ESS is defined by multiple BSSes connected through which element?
- A common channel
- A shared encryption key
- A common BSSID
- The Distribution System (DS) (Correct answer)
Correct answer: The Distribution System (DS)
The Distribution System (DS) interconnects the BSSes, and the shared SSID ties them together into an ESS.
Question 74: Which nutritional marker BEST reflects a patient's acute protein status over the previous 2–3 days?
- Total lymphocyte count
- Prealbumin (transthyretin) (Correct answer)
- Albumin
- Transferrin
Correct answer: Prealbumin (transthyretin)
Prealbumin has a half-life of 2–3 days, making it the most sensitive short-term indicator of acute protein nutritional status compared to albumin's 20-day half-life.
Question 75: What is the primary advantage of a distributed antenna system (DAS) in large venues?
- Lower cost than standard access points
- Exclusive use of the 6 GHz Wi-Fi 6E band
- Even signal distribution using many low-power antennas to eliminate dead zones (Correct answer)
- Higher per-antenna transmit power for greater range
Correct answer: Even signal distribution using many low-power antennas to eliminate dead zones
DAS uses many small, low-power antennas distributed throughout a space to provide consistent coverage without the dead zones created by fewer high-power antennas.
Question 76: An organization's WLAN goal states 'support for 500 concurrent users in the main conference center.' This is an example of which type of requirement?
- Regulatory requirement
- Aesthetic requirement
- Security requirement
- Capacity requirement (Correct answer)
Correct answer: Capacity requirement
Supporting a specific number of concurrent users is a capacity requirement that drives AP density and channel planning.
Question 77: Pyoderma gangrenosum (PG) is characterized by which wound behavior that distinguishes it from infection?
- Pathergy — wound enlargement following minor trauma or debridement (Correct answer)
- Granular wound bed with high exudate and foul odor
- Central eschar with surrounding cellulitis
- Rapid healing response to systemic antibiotics
Correct answer: Pathergy — wound enlargement following minor trauma or debridement
Pathergy, where minor trauma causes the wound to worsen or enlarge, is a hallmark of pyoderma gangrenosum and distinguishes it from infectious wounds.
Question 78: Which wireless security mechanism prevents a compromised session key from exposing past or future sessions?
- WEP IV rotation
- TKIP sequence counter
- Perfect Forward Secrecy (PFS) (Correct answer)
- SSID cloaking
Correct answer: Perfect Forward Secrecy (PFS)
Perfect Forward Secrecy ensures that each session uses a unique key, so compromising one session key does not expose other sessions.
Question 79: Which of the following technologies uses multiple antennas at both the transmitter and receiver to improve performance through techniques like spatial multiplexing and antenna diversity?
- SISO (Single-Input Single-Output)
- RF Splitting
- MIMO (Multiple-Input Multiple-Output) (Correct answer)
- Beamforming
Correct answer: MIMO (Multiple-Input Multiple-Output)
MIMO (Multiple-Input Multiple-Output) is a technology that utilizes multiple antennas for both transmitting and receiving data. This allows for techniques like spatial multiplexing, which sends multiple data streams simultaneously to increase throughput, and antenna diversity, which improves link reliability by mitigating the effects of fading. SISO uses a single antenna for both transmit and receive. RF splitting divides a signal but doesn't inherently involve multiple antennas for performance enhancement. Beamforming can be used with MIMO but is a separate technique for focusing signals.
Question 80: A network administrator needs to provide a wireless connection between two buildings that are 500 meters apart. Which type of antenna would be most suitable for this point-to-point link?
- Dipole antenna
- Leaky coaxial cable
- Omnidirectional antenna
- Highly-directional antenna (Correct answer)
Correct answer: Highly-directional antenna
Highly-directional antennas, such as parabolic dish or grid antennas, are designed to focus RF energy into a very narrow beam. This high concentration of energy allows the signal to travel long distances with minimal loss, making them ideal for point-to-point links between buildings. Omnidirectional and dipole antennas radiate signals in a 360-degree pattern and are not suitable for long-distance, focused links. A leaky coaxial cable is a type of antenna used for providing coverage in confined spaces like tunnels.
Question 81: What is antenna downtilt used for in outdoor WLAN deployments?
- To switch between 2.4 GHz and 5 GHz bands
- To direct energy toward users below the antenna rather than toward the horizon (Correct answer)
- To reduce the operating frequency
- To increase gain in the horizontal plane
Correct answer: To direct energy toward users below the antenna rather than toward the horizon
Antenna downtilt angles the radiation pattern downward to focus coverage on users in the intended service area and reduce interference with distant systems.
Question 82: When multiple APs in the same area are configured to use the same 802.11 channel, what problem results?
- Near/far power imbalance
- Adjacent channel interference (ACI)
- Hidden node collisions between APs
- Co-channel interference (CCI) and increased contention (Correct answer)
Correct answer: Co-channel interference (CCI) and increased contention
Co-channel interference (CCI) forces all devices sharing the same channel to contend for the medium, reducing throughput and increasing latency.
Question 83: A user's laptop shows a 'limited connectivity' warning after joining a secured Wi-Fi network. Which troubleshooting step should be performed first?
- Verify the DHCP server is reachable and has available leases (Correct answer)
- Replace the wireless NIC driver
- Disable the firewall on the laptop
- Change the Wi-Fi channel on the AP
Correct answer: Verify the DHCP server is reachable and has available leases
Limited connectivity typically indicates the device associated but failed to get an IP, making DHCP the first thing to verify.
Question 84: An enterprise access point is described as 3x3:3 MIMO. What does this notation mean?
- Third generation, revision 3, with 3 dBm output
- 3 clients, 3 VLANs, 3 SSIDs supported
- 3 GHz frequency, 3 channels, 3 dBi gain
- 3 transmit antennas, 3 receive antennas, 3 spatial streams (Correct answer)
Correct answer: 3 transmit antennas, 3 receive antennas, 3 spatial streams
The notation TxR:S indicates transmit chains x receive chains: spatial streams, so 3x3:3 means 3 transmit, 3 receive antennas supporting 3 simultaneous spatial streams.
Question 85: Which 802.11 standard first introduced MIMO (Multiple Input, Multiple Output) antenna technology?
- 802.11g
- 802.11a
- 802.11ac
- 802.11n (Correct answer)
Correct answer: 802.11n
802.11n was the first standard to formally incorporate MIMO, supporting up to 4 spatial streams to increase throughput and reliability.
Question 86: An 802.11ac signal operating in the 5 GHz band will experience more of what compared to an 802.11g signal in the 2.4 GHz band, assuming both are transmitted at the same power over the same distance in free space?
- Refraction
- Phase shifting
- Multipath propagation
- Free Space Path Loss (FSPL) (Correct answer)
Correct answer: Free Space Path Loss (FSPL)
Free Space Path Loss (FSPL) is greater at higher frequencies. As RF signals propagate, they lose strength over distance. This loss is proportional to the square of the frequency. Therefore, a 5 GHz signal will attenuate more over the same distance than a 2.4 GHz signal.
Question 87: Which unit is used to express absolute RF power levels referenced to 1 milliwatt?
- dBm (Correct answer)
- dBi
- dBd
- dB
Correct answer: dBm
dBm expresses power relative to 1 mW; 0 dBm = 1 mW, positive values are greater than 1 mW, negative values are less.
Question 88: Which cell type is primarily responsible for wound contraction during the proliferative phase?
- Neutrophils
- Keratinocytes
- Myofibroblasts (Correct answer)
- Macrophages
Correct answer: Myofibroblasts
Myofibroblasts, differentiated from fibroblasts under TGF-β stimulation, contain actin microfilaments that generate the contractile force to close wounds.
Question 89: Which tool captures 802.11 frames for detailed protocol-level analysis?
- Spectrum analyzer
- Wireless protocol analyzer (packet sniffer) (Correct answer)
- SNMP management console
- Wi-Fi scanner mobile app
Correct answer: Wireless protocol analyzer (packet sniffer)
A wireless protocol analyzer captures 802.11 frames at the MAC layer for detailed analysis of association, authentication, and data exchange sequences.
Question 90: In a 802.11r over-the-air fast transition, what frames does the client use to complete the roam?
- EAPOL 4-way handshake frames
- Authentication and Reassociation frames with FT IEs (Correct answer)
- Probe and Association frames only
- Deauthentication and new Association frames
Correct answer: Authentication and Reassociation frames with FT IEs
Over-the-air FT uses modified Authentication and Reassociation frames carrying FT Information Elements to complete the handoff with a single round-trip.
Question 91: A higher-order modulation scheme like 256-QAM compared to 64-QAM requires:
- A higher SNR to decode reliably (Correct answer)
- Fewer spatial streams
- Less spectrum bandwidth
- Lower transmit power
Correct answer: A higher SNR to decode reliably
256-QAM encodes more bits per symbol but requires a cleaner, higher-SNR signal to distinguish the denser constellation points.
Question 92: What is the maximum output power allowed by the FCC for 2.4 GHz Wi-Fi devices in the United States?
- 1000 mW (30 dBm)
- 100 mW (20 dBm) (Correct answer)
- 10 mW (10 dBm)
- 10 W (40 dBm)
Correct answer: 100 mW (20 dBm)
The FCC limits 2.4 GHz ISM band intentional radiators to 1 Watt (30 dBm) conducted power, but with antenna gain limits the EIRP cap results in effective limits typically around 100 mW for point-to-multipoint.
Question 93: What does EIRP stand for in the context of wireless networking?
- Effective Internal Radiation Pattern
- Equivalent Interference Rejection Point
- Enhanced Internal Radio Protocol
- Effective Isotropic Radiated Power (Correct answer)
Correct answer: Effective Isotropic Radiated Power
EIRP (Effective Isotropic Radiated Power) is the total power radiated by a system compared to an isotropic radiator, combining transmit power and antenna gain.
Question 94: In the Friis transmission equation, doubling the distance between transmitter and receiver causes received power to:
- Decrease by 12 dB
- Decrease by 6 dB (Correct answer)
- Remain unchanged
- Decrease by 3 dB
Correct answer: Decrease by 6 dB
Free-space path loss follows an inverse-square law, so doubling distance quadruples path loss, which is a 6 dB decrease in received power.
Question 95: Which WLAN attack specifically targets the WPS PIN feature?
- Pixie Dust attack (Correct answer)
- PMKID offline crack
- Deauth flood
- ARP poisoning
Correct answer: Pixie Dust attack
The Pixie Dust attack exploits weak nonce generation in certain WPS implementations to recover the WPS PIN and subsequently the WPA2 passphrase offline.
Question 96: Which 802.11 feature allows an AP to request that associated clients adjust their transmit power to reduce co-channel interference?
- APSD – Automatic Power Save Delivery
- BSS Coloring
- DRS – Dynamic Rate Switching
- TPC – Transmit Power Control (Correct answer)
Correct answer: TPC – Transmit Power Control
Transmit Power Control (TPC), defined in 802.11h, lets the AP signal clients to lower their transmit power, reducing interference on shared channels.
Question 97: Which of the following 802.11 amendments introduced Multiple-Input Multiple-Output (MIMO) technology, significantly increasing throughput by using multiple antennas to transmit and receive data simultaneously?
- 802.11g
- 802.11a
- 802.11n (Correct answer)
- 802.11b
Correct answer: 802.11n
802.11n was a major advancement in Wi-Fi technology, and its key innovation was the introduction of MIMO. This technique uses multiple antennas for both the transmitter and receiver to improve communication performance, allowing for higher data rates and increased range compared to previous standards like 802.11a, b, and g, which used a single antenna at a time.
Question 98: In 802.11ax, what does 'Target Wake Time' (TWT) primarily accomplish?
- Sets the time an AP must wake to process management frames
- Specifies the deadline for a TXOP burst to complete
- Defines the wakeup latency after a DTIM beacon for power-save clients
- Negotiates scheduled wake intervals so IoT/battery devices sleep longer and reduce channel contention (Correct answer)
Correct answer: Negotiates scheduled wake intervals so IoT/battery devices sleep longer and reduce channel contention
TWT allows an AP and client to negotiate specific times for the client to wake and communicate, dramatically improving battery life for IoT devices and reducing simultaneous channel contention.
Question 99: Which 802.11 amendment introduced the concept of mesh networking (MBSS)?
- 802.11s (Correct answer)
- 802.11r
- 802.11v
- 802.11k
Correct answer: 802.11s
802.11s introduced the Mesh Basic Service Set (MBSS) architecture enabling self-forming, self-healing wireless mesh networks.
Question 100: Which factor does NOT directly affect free-space path loss?
- Wavelength of the signal
- Transmit power (Correct answer)
- Frequency of the signal
- Distance between antennas
Correct answer: Transmit power
Free-space path loss depends only on distance and frequency (wavelength); transmit power is a link budget input, not part of FSPL itself.
Question 101: Which topical agent is MOST appropriate for a wound with suspected Pseudomonas aeruginosa infection indicated by a blue-green exudate?
- Hydrocolloid dressing
- Silver-containing antimicrobial dressing (Correct answer)
- Collagen matrix dressing
- Iodine-impregnated gauze
Correct answer: Silver-containing antimicrobial dressing
Silver has broad-spectrum antimicrobial activity including against Pseudomonas and is appropriate for critically colonized or locally infected wounds.
Question 102: An 802.11 client in power-save mode relies on which beacon-carried information to know when buffered frames await pickup?
- RSN element
- DS Parameter Set
- TIM (Traffic Indication Map) (Correct answer)
- SSID element
Correct answer: TIM (Traffic Indication Map)
The Traffic Indication Map (TIM) in the beacon informs power-saving clients which of them have frames buffered at the AP awaiting retrieval.
CWS Certified Wound Specialist Exam
The CWS Certified Wound Specialist exam, administered by the American Board of Wound Management, assesses competency in wound assessment, dressing selection, and evidence-based wound care practice.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds