1.2 CWNA-109 Knowledge Domains and Study Strategy

Why the six domains change what you study

CWNA-109 is a single 60-item vendor-neutral engineering exam. The skills CWNP measures come from a Job Task Analysis (JTA) with wireless networking experts (Certified Wireless Network Experts, CWNEs) and professionals. The objectives PDF at https://www.cwnp.com/uploads/cwna-109-objectives-2023.pdf (checked 2026-09-20) prints a table that distributes questions across six knowledge domains. That table—not a marketing bullet list on a third-party blog—is the weight source this section uses.

Harborline Logistics' Maya has six to ten weeks. If she spends 80% of those weeks on Wi-Fi Protected Access 3 (WPA3) trivia because security feels "advanced," she inverts the blueprint: WLAN Network Security is 10%, the smallest slice. If she skips RF Validation and Remediation because "surveys are a design-pro exam," she gives away a 20% domain. Domain weights tell her where scored minutes go. Learning order is a different question, answered later: she still starts with radio frequency (RF) math even though Domain 1 is only 15%, because later domains assume she can read dBm, signal-to-noise ratio (SNR), and Equivalent Isotropically Radiated Power (EIRP).

This chapter is independent CWNA-109 study material by OpenExamPrep. It teaches CWNP's published domain names and table percentages. It does not claim CWNP approval, partnership, or exact equivalence with CWNP courseware.

The official table—and the PDF heading trap

Official table percentages (sum 100%):

Add the table: 15 + 20 + 20 + 15 + 10 + 20 = 100. That arithmetic is why the table is authoritative.

Exam trap: the same PDF's section-6 heading says 10%. That heading is inconsistent with the table. If Maya studies Domain 6 as if it were 10%, she treats a fifth of the exam like a twentieth. Use 20% for Domain 6. Do not "split the difference" to 15%. Do not invent a seventh domain to force a different total.

CWNP does not publish a guaranteed per-form item count per domain. You can build a proportional planning model if you assume 60 equally weighted items:

• 15% of 60 = 9 items (Domains 1 and 4)
• 20% of 60 = 12 items (Domains 2, 3, and 6)
• 10% of 60 = 6 items (Domain 5)
• Check: 9 + 12 + 12 + 9 + 6 + 12 = 60

If Maya wrongly uses the 10% heading for Domain 6, her model drops from 12 validation items to 6. That is a 50% under-weight of a 20% domain. Keep repeating: this 9/12/6 split is a heuristic, not a CWNP raw cut score. CWNP still does not publish pass rates.

Domain 1 — RF Technologies (15%)

Domain 1 is RF behavior, math, antennas, and accessories. Maya must define wavelength, frequency, amplitude, phase, and sine waves; explain propagation and coverage; and name impairments: reflection, refraction, diffraction, scattering, multipath, voltage standing wave ratio (VSWR), return loss, and free space path loss (FSPL). She applies RF mathematics: watt and milliwatt, decibel (dB), dBm and dBi, noise floor, SNR, received signal strength indicator (RSSI), the rules of 10s and 3s, and EIRP. Antenna work includes RF versus physical line of sight, Fresnel clearance, beamwidths, passive gain, polarization, diversity, radio chains, and multiple-input multiple-output (MIMO). She must also select omni-directional, semi-directional, and highly directional antennas, read azimuth and elevation charts, and account for cables, connectors, lightning arrestors, grounding, enclosures, and mounting.

Harborline example: a 20 dBm access point (AP) radio plus a 6 dBi antenna, ignoring cable loss for a second, is 26 dBm EIRP in that simplified addition. Later chapters grind the 10s and 3s. This section only locks that Domain 1 is the language of every later score report.

Domain 2 — WLAN Regulations and Standards (20%)

Domain 2 is a 20% slice: industry bodies, PHY generations, modulation, channel concepts, Open Systems Interconnection (OSI) / TCP/IP layers, regulatory constraints, and use cases. Bodies include IEEE, the Wi-Fi Alliance, the Internet Engineering Task Force (IETF), and regulatory agencies. PHY solutions in IEEE 802.11-2020 and amendments run DSSS 802.11, HR-DSSS 802.11b, OFDM 802.11a, ERP 802.11g, Wi-Fi 4 HT 802.11n, Wi-Fi 5 VHT 802.11ac, Wi-Fi 6 HE 802.11ax on 2.4 and 5 GHz, and Wi-Fi 6E HE 802.11ax on 6 GHz. Spread-spectrum and modulation and coding scheme (MCS) topics include DSSS, orthogonal frequency-division multiplexing (OFDM), orthogonal frequency-division multiple access (OFDMA) and resource units, BPSK, QPSK, and QAM 16/64/256/1024. Functional concepts include primary channels, overlapping basic service set (OBSS), adjacent overlapping versus non-overlapping channels, throughput versus data rate, bandwidth, and guard interval. Regulatory work includes bands, available channels, power constraints, indoor/outdoor variants, Dynamic Frequency Selection (DFS), and Transmit Power Control (TPC). Use cases include basic service set (BSS) / extended service set (ESS) WLANs, bridging, peer-to-peer, and mesh.

PHY list stop: Wi-Fi 6E, not Wi-Fi 7

The objectives PHY list stops at Wi-Fi 6E. Wi-Fi 7 / 802.11be features such as multi-link operation (MLO), 320 MHz channels, and 4096-QAM are not CWNA-109 objectives. Mention them only as post-exam context. If a Harborline vendor slide brags about Wi-Fi 7, Maya still studies 802.11ax in 6 GHz for this sitting.

Domain 3 — WLAN Protocols and Devices (20%)

Domain 3 is the other 20% peer of Domain 2: service sets, Media Access Control (MAC) / PHY terminology, frame format and addressing, the three frame types, discovery and association, channel access, MAC operations, and devices. Terms include stations (STAs), BSS, service set identifier (SSID), basic service set identifier (BSSID), ESS, independent basic service set (IBSS), distribution system (DS), and distribution system media (DSM). Framing vocabulary includes MSDU, MPDU, PSDU, PPDU, A-MSDU, A-MPDU, and PHY preamble/header. Channel access includes distributed coordination function (DCF), enhanced distributed channel access (EDCA), RTS/CTS, CTS-to-Self, network allocation vector (NAV), interframe spaces (SIFS, DIFS, EIFS, AIFS), and physical versus virtual carrier sense. Devices include APs, WLAN controllers, wireless network management systems, bridge/mesh APs, and clients.

Maya's scanners live in an infrastructure BSS. Confusing SSID (the name humans type) with BSSID (the AP radio's identifier) is a classic Domain 3 miss that later validation work cannot paper over.

Domain 4 — WLAN Network Architecture and Design Concepts (15%)

Domain 4 is 15%: Power over Ethernet (PoE), architectures, design scenarios, proprietary features, and supporting network services. PoE includes power source equipment (PSE), powered device (PD), midspan versus endpoint, power classes, and budgets versus powered port density. Architectures include centralized versus distributed forwarding; control, management, and data planes; scalability and availability; tunneling, quality of service (QoS), and VLANs. Design scenarios include data/voice/video, location services, high density, guest/bring your own device (BYOD), and legacy 802.11 clients. Proprietary-feature awareness includes airtime fairness, band steering, dynamic power and channel management, and internal architecture communication. Supporting services include DHCP, DNS, NTP/SNTP, VLANs, RADIUS/LDAP, access control lists, and wired capacity.

Harborline trap: hanging sixty high-power APs on a switch whose PoE budget was sized for twelve phones. That is Domain 4, not "just cabling."

Domain 5 — WLAN Network Security (10%)

Domain 5 is the smallest scored slice at 10%, not a skip. Weak options that should not be used in enterprise WLANs include Wired Equivalent Privacy (WEP), Shared Key authentication, SSID hiding as security, MAC filtering, and deprecated WPA / WPA2 with TKIP. Effective mechanisms include Advanced Encryption Standard (AES), WPA2-Personal pre-shared key limits, and WPA2-Enterprise with 802.1X, RADIUS, and Extensible Authentication Protocol (EAP) methods. WPA3 topics include enhancements versus WPA2, Simultaneous Authentication of Equals (SAE), and Opportunistic Wireless Encryption (OWE). Tools and options include access control, protected management frames (PMF), fast secure roaming, wireless intrusion prevention system (WIPS) / rogue detection, protocol and spectrum analyzers, and secure management protocols.

Six proportional items can still fail Maya if she still believes hidden SSIDs are enterprise security. Small weight is not zero weight.

Domain 6 — RF Validation and Remediation (20%)

Domain 6 is 20% in the table. It covers post-implementation validation (coverage, throughput, roaming, connectivity documentation), RF interference including CCC versus overlapping-channel interference and non-802.11 sources, application testing (availability, VoIP, real-time apps, throughput), validation tools (throughput testers, survey software/scanners, protocol analyzers, spectrum analyzers), troubleshooting tools, and common faults: distribution-system throughput / PoE / WAN, SNR/retries/airtime, DHCP/DNS/time, security mismatches, and hidden node.

Maya cannot validate a design she cannot describe in Domain 1–4 language. That is why validation is last in study order even though it is tied for the largest weight.

Recommended study order versus study hours

Hours should roughly follow 15 / 20 / 20 / 15 / 10 / 20. Order should not start with security just because it is fashionable, and should not start with surveys before RF math.

Recommended sequence for Harborline's Maya:

1. RF math and behavior first (Domain 1). If she cannot move between milliwatts and dBm with the rules of 10s and 3s, every later heat map is decoration.
2. PHYs and regulations (Domain 2). Legacy through Wi-Fi 6E only. Do not burn a week on 802.11be.
3. MAC, service sets, and devices (Domain 3). Frames, scanning, association, EDCA, roaming.
4. Design and architecture (Domain 4). PoE budgets, forwarding planes, voice versus high-density cells, supporting services.
5. Security (Domain 5). Smaller hour budget, still mandatory: WPA2/WPA3, SAE, OWE, PMF, WIPS—and what not to use.
6. Validation and remediation (Domain 6). Surveys, interference classes, application tests, and common faults, now that she can interpret the numbers.

Independent OpenExamPrep practice questions exist for exam id cwna. Use them to drill weak X.Y areas after you have the stack, not as a substitute for CWNP's 60 presented items and not as a source for unpublished pass rates.

Independent prep path

Register with CWNP. Verify dates on the official pages. Study here for teaching depth. Nothing in this guide replaces the proctored exam.

Blueprint traps

1. Using the Domain 6 10% heading instead of the table's 20%.
2. Studying Wi-Fi 7 / 802.11be as if it were a CWNA-109 PHY objective.
3. Skipping RF math because Domain 1 is "only 15%."
4. Skipping validation because surveys "belong to CWDP."
5. Spending most weeks on security because 10% "must be the hard part."
6. Treating a practice-bank size as the official 60.
7. Describing OpenExamPrep as a CWNP partner or as having CWNP approval it does not have.