802.11 Wireless Standards
The 802.11 standard family defines how Wi-Fi works. Each revision improves speed, efficiency, or range. For the exam, know the frequency bands, maximum theoretical throughput, and Wi-Fi generation names.
| Standard | Wi-Fi Gen | Frequency | Max Speed | Key Feature |
|---|---|---|---|---|
| 802.11a | — | 5 GHz only | 54 Mbps | First 5GHz standard (1999); less interference, shorter range |
| 802.11b | — | 2.4 GHz only | 11 Mbps | First widely adopted standard; slowest; 2.4GHz congestion |
| 802.11g | — | 2.4 GHz only | 54 Mbps | Same speed as 'a' but on 2.4GHz; backward-compatible with 802.11b |
| 802.11n | Wi-Fi 4 | 2.4 + 5 GHz | 600 Mbps | First dual-band standard; introduced MIMO (multiple antennas) |
| 802.11ac | Wi-Fi 5 | 5 GHz only | 3.5 Gbps | MU-MIMO, wider channels (80/160MHz), beamforming |
| 802.11ax | Wi-Fi 6/6E | 2.4 + 5 + 6 GHz | 9.6 Gbps | OFDMA for dense environments; Wi-Fi 6E adds 6GHz band |
802.11a and 802.11g are both 54 Mbps — same speed, different bands (a=5GHz, g=2.4GHz). This is a classic trick question.
802.11ac is 5GHz only — it does not operate on 2.4GHz. If the scenario requires dual-band, the answer is 802.11n or 802.11ax.
802.11ax = Wi-Fi 6 — the answer to any "most current standard" question.
2.4 GHz vs 5 GHz
In the 2.4GHz band, channels are 22MHz wide but spaced only 5MHz apart — adjacent channels overlap heavily. Channels 1, 6, and 11 are the only three that don't overlap with each other. When deploying multiple APs in the same space, use only these three channels to avoid adjacent-channel interference (which garbles transmissions), even though it increases co-channel interference (which only slows devices, it doesn't corrupt data).
Wi-Fi Security — WEP through WPA3
WPA2/WPA3-Personal (PSK/SAE): One shared password for all users. Simple setup. Risk: anyone with the password has access; must change password if someone leaves.
WPA2/WPA3-Enterprise (802.1X): Per-user credentials validated by RADIUS. Revoking one user's access doesn't affect others. Required for any regulated environment (PCI-DSS, HIPAA). If the scenario mentions "revoking individual access" or "per-user credentials," the answer is Enterprise/802.1X.
802.1X — Enterprise Wi-Fi Authentication
In WPA2/WPA3-Enterprise, clients authenticate using 802.1X (port-based access control) and EAP (Extensible Authentication Protocol). Three components are involved:
| Component | Role | Examples |
|---|---|---|
| Supplicant | The client device requesting wireless access. Presents credentials via EAP. | Laptop, phone, IoT device |
| Authenticator | The wireless AP. Passes EAP traffic between supplicant and auth server — does not make the allow/deny decision itself. | Wireless access point, managed switch |
| Auth Server (RADIUS) | Validates credentials and returns Accept or Reject to the authenticator. Integrates with Active Directory / LDAP. | Microsoft NPS, FreeRADIUS, Cisco ISE |
EAP-TLS: Most secure — both client and server authenticate with X.509 certificates. Requires certificate deployment to all clients. Used in high-security environments.
PEAP (Protected EAP): Client authenticates with username/password, wrapped inside a TLS tunnel (server presents a certificate). Most common in enterprise deployments — simpler than EAP-TLS since clients don't need certificates.
EAP-TTLS: Similar to PEAP — TLS tunnel for credential protection. Supports a wider variety of inner authentication methods.
Wireless Attack Types
Other Key Wireless Concepts
Exam Scenarios
Wireless Frequencies and Regulatory Considerations
Wi-Fi operates in licensed spectrum bands, and the regulatory environment affects which channels are available and at what transmit power levels. For A+ and Network+ exam purposes, the key regulatory concepts are channel availability, transmit power limits, and the DFS requirement.
In the 5GHz band, channels are divided into several groups. Channels 36–48 are UNII-1 and can be used at lower power levels indoors. Channels 52–64 and 100–144 are UNII-2 and UNII-2e, and these channels require DFS (Dynamic Frequency Selection) — the AP must listen for radar signals (used by weather radar and military radar systems that share these frequencies) before transmitting. If radar is detected, the AP must immediately vacate that channel and switch to a clear one. This is why APs on DFS channels occasionally lose clients briefly during a channel switch — they detected radar and moved. Channels 149–165 are UNII-3 and allow the highest transmit power levels, making them popular for outdoor and longer-range deployments.
The 6GHz band, newly opened for Wi-Fi 6E, has different rules — it requires either Automated Frequency Coordination (AFC) for outdoor use or is limited to indoor use at lower power levels. The 6GHz band dramatically expands available spectrum: approximately 1,200 MHz compared to just 70 MHz on 2.4GHz and 500 MHz on 5GHz, providing up to seven additional 160MHz-wide channels. This is why Wi-Fi 6E is considered a major step forward for high-density deployments.
MIMO, MU-MIMO, and OFDMA
Understanding the antenna and multiplexing technologies behind modern Wi-Fi standards is increasingly important for the exam, especially the differences between Wi-Fi generations.
MIMO (Multiple-Input, Multiple-Output) was introduced with 802.11n (Wi-Fi 4). Instead of a single antenna, MIMO uses multiple antennas at both the transmitter and receiver to send and receive multiple spatial streams simultaneously. A 2×2:2 MIMO AP has 2 transmit antennas, 2 receive antennas, and can handle 2 simultaneous spatial streams — doubling throughput compared to a single antenna. Enterprise-class 802.11n APs often support 3×3:3 or 4×4:4 configurations.
MU-MIMO (Multi-User MIMO), introduced in 802.11ac Wave 2 (Wi-Fi 5), extends MIMO to serve multiple clients simultaneously. Single-user MIMO (SU-MIMO) only transmits to one device at a time — other devices wait their turn. MU-MIMO allows the AP to transmit to multiple devices in parallel using spatial multiplexing. Wi-Fi 5 supported MU-MIMO downlink (AP to client) only. Wi-Fi 6 (802.11ax) extends MU-MIMO to uplink as well, and supports up to 8 simultaneous spatial streams.
OFDMA (Orthogonal Frequency-Division Multiple Access) is a major Wi-Fi 6 feature and a key exam topic when the question mentions dense environments or IoT. Traditional Wi-Fi (OFDM in 802.11a/g/n/ac) assigns the entire channel to one device for each transmission. OFDMA divides the channel into smaller frequency units called Resource Units (RUs) and allocates different RUs to different clients simultaneously. This dramatically reduces latency and improves efficiency in high-density environments — stadiums, airports, offices with many IoT devices — because the AP can serve many small devices simultaneously rather than making them queue for channel access.
Wireless Network Architecture Concepts
The exam tests specific wireless terminology describing how wireless networks are structured. Make sure you know these terms precisely.
| Term | Definition | Exam Significance |
|---|---|---|
| SSID | Service Set Identifier — the name of a wireless network. Up to 32 characters. Multiple APs can broadcast the same SSID to create a seamless network. | Hidden SSID is security through obscurity — not genuine security. Clients must know the SSID to connect. |
| BSS | Basic Service Set — a single AP and its associated clients. The smallest wireless network unit. | Each BSS has a unique BSSID (the AP's MAC address). Differentiates physical AP cells. |
| ESS | Extended Service Set — multiple BSSs (APs) sharing the same SSID, connected by a distribution system (wired network). Enables seamless roaming. | Corporate Wi-Fi is an ESS. Clients roam between APs without reconnecting as long as the SSID and security settings match. |
| IBSS | Independent Basic Service Set — ad-hoc wireless network with no AP. Devices connect peer-to-peer directly. | Rarely used in enterprise settings; generally blocked on corporate networks as a security risk. |
| BSSID | The MAC address of an AP's radio interface. Uniquely identifies each AP cell, even if multiple APs share the same SSID. | Used by WIDS tools to detect rogue APs — unexpected BSSIDs broadcasting your SSID indicate an evil twin attack. |
| Roaming | Client moves from one AP to another within an ESS without losing connectivity. 802.11r (Fast BSS Transition) speeds up the re-authentication process during roaming. | Poor roaming is a common wireless complaint — clients stick to a weak AP instead of roaming to a closer one. |
Common Wireless Troubleshooting Issues
Network+ tests practical troubleshooting in addition to theory. Here are the most common wireless problems and their root causes that appear in exam scenarios.
Slow wireless speeds despite strong signal are often caused by co-channel interference (too many APs on the same channel in the same area), or by legacy devices on the network. When even one 802.11b device is present on a 2.4GHz network, the AP enables a protection mechanism that dramatically reduces throughput for all devices. Separating legacy and modern devices onto different SSIDs/bands resolves this.
Intermittent connectivity or high retransmission rates are often caused by adjacent-channel interference (APs on overlapping channels), physical obstructions causing multipath reflection, or interference from non-Wi-Fi 2.4GHz sources such as microwave ovens, cordless phones, and Bluetooth devices. Moving to 5GHz resolves most of these issues because the 5GHz band has more channels and far less crowded spectrum.
Clients connecting at low speeds (e.g., 54 Mbps instead of 300+ Mbps) despite a capable adapter usually means the client is far from the AP and using a lower modulation rate due to weak signal, or the AP's configuration has the band steering or minimum RSSI threshold misconfigured, allowing distant clients to hold onto a connection at very low rates instead of roaming to a closer AP.
802.1X authentication failures in enterprise environments are commonly caused by an expired RADIUS server certificate, a mismatch between the server certificate's CA and the CA trusted by clients, or a client not having the correct supplicant (EAP method) configured. Always check certificate validity dates when enterprise Wi-Fi authentication suddenly stops working.
Wi-Fi 6E extends 802.11ax into the 6GHz band, which was opened by the FCC in 2020. The 6GHz band offers approximately 1,200 MHz of spectrum — compared to 70 MHz on 2.4GHz and 500 MHz on 5GHz. This means up to seven additional 160MHz-wide channels, virtually eliminating interference and congestion. Wi-Fi 6E devices require a tri-band adapter. The 6GHz band has shorter range than 5GHz (higher frequency attenuates more), so it is best suited for high-density indoor environments. Older Wi-Fi 6 devices do not support 6GHz — they require a firmware upgrade or replacement.
Ace Network+ and Security+
Every protocol, standard, and attack concept — all on one cheat sheet.