CND (312-38) Network Defense Simulation

Learn to identify and configure critical wireless network standards for ensuring traffic availability and prioritization. Analyze the wireless controller logs to determine the appropriate standard for VoIP defense.

Network Scenario

You are a Network Security Analyst managing a corporate branch office's Wireless LAN Controller (WLC). Users have reported frequent dropped VoIP calls and choppy video conferencing over the Wi-Fi network, particularly during periods of high data transfer (e.g., scheduled server backups or large file downloads).

To ensure the Availability of critical voice and video communications—a key pillar of the CIA triad—you need to configure the WLAN to utilize an industry standard that natively supports Wi-Fi Multimedia (WMM) and Quality of Service (QoS).

Traffic & Logs

WLC Event Log Extract (Prior to Configuration)

08:14:22 WLC_SYS: *apfMsConnTask_4: %QOS-4-POLICY_FAIL: Client 00:1A:2B:3C:4D:5E requested AC_VO (Voice), rejected by WLAN profile. 08:14:22 WLC_SYS: *apfMsConnTask_4: %WLAN-3-WMM_NOT_SUPPORTED: WMM/QoS features disabled on 802.11a/b base standard. Downgrading traffic to Best Effort (AC_BE). 08:14:25 WLC_SYS: *DOT11-4-MAXRETRIES: Max retries exceeded for frame destined to 00:1A:2B:3C:4D:5E (VoIP payload). Packet dropped. 08:14:30 WLC_SYS: *apfMsConnTask_1: Client 00:99:88:77:66:55 (FTP Data) utilizing 85% of channel airtime.

Analysis: The base 802.11a/b standards treat all traffic equally using CSMA/CA, leading to resource starvation for time-sensitive voice packets when bulk data transfers occur.

Question

Which of the following standards is a proposed enhancement to the 802.11a and 802.11b wireless LAN (WLAN) specifications that offers quality of service (QoS) features, including the prioritization of data, voice, and video transmissions?

Expert Analysis

1. What is happening in the network

The network is experiencing resource contention on the wireless medium. Bulk data transfers (like FTP) are competing directly with time-sensitive UDP traffic (VoIP). Because base 802.11a/b standards lack native prioritization mechanisms, heavy data traffic is causing jitter, delay, and packet drops for voice calls, effectively causing a localized Denial of Service (DoS) to communications availability.

2. Identify behavior

The WLC logs show that a client is requesting the `AC_VO` (Access Category - Voice) priority queue, but the WLAN profile is rejecting it, stating that WMM/QoS features are not supported by the currently configured base standards. Traffic is being downgraded to `AC_BE` (Best Effort).

3. Why Option C is correct

802.11e is the IEEE standard specifically designed to introduce Quality of Service (QoS) MAC enhancements to wireless LANs. It provides the foundation for Wi-Fi Multimedia (WMM), which categorizes traffic into four Access Categories: Voice (AC_VO), Video (AC_VI), Best Effort (AC_BE), and Background (AC_BK), prioritizing critical traffic over bulk data.

4. Why others are wrong

  • A. 802.15: This is the working group for Wireless Personal Area Networks (WPANs), such as Bluetooth and Zigbee. It has nothing to do with WLAN QoS.
  • B. 802.11n: This standard improves network throughput and range via MIMO antennas and wider channels, but it relies on 802.11e/WMM for QoS prioritization.
  • D. 802.11h: This standard resolves interference issues with radar systems in the 5GHz band by introducing Dynamic Frequency Selection (DFS) and Transmit Power Control (TPC).

5. Defensive action

To restore availability, the Network Defender must enable WMM (based on 802.11e) on the WLAN profile via the WLC. Furthermore, QoS profiles should be mapped properly to upstream wired switches (DSCP markings) to ensure end-to-end prioritization.

MINI LESSON: Availability as a Defensive Pillar

In network defense, security isn't just about stopping hackers; it's about ensuring authorized users have reliable access to resources. Without QoS, a network is highly susceptible to unintentional DoS caused by bandwidth saturation. Implementing 802.11e/WMM is a fundamental defensive control to protect enterprise communications infrastructure.

Ready for the next challenge?

Sharpen your Network Defense skills with full practice scenarios.

Explore more CND simulations