- The Short Answer: Certified Wireless Security Professional
- Where the Credential Sits in the CWNP Program
- What "Wireless Security Professional" Actually Promises
- The Four Domains Behind the Name
- Technical Topics That Define the Exam
- Exam Format, Voucher, and Remote Proctoring
- The CWNA Prerequisite and What It Means for the Title
- Keeping the Credential Current
- Who Uses the Title
- Sequencing Your Study Around the Weighting
- Frequently Asked Questions
- CWSP stands for Certified Wireless Security Professional, issued by CWNP (Certified Wireless Network Professional).
- The current exam is CWSP-208: 60 multiple-choice questions, 90 minutes, 70% passing score.
- WLAN Security Design and Architecture carries 50% of the exam; Vulnerabilities, Threats, and Attacks carries 30%.
- A current, valid CWNA is required before you can earn the CWSP credential.
The Short Answer: Certified Wireless Security Professional
CWSP stands for Certified Wireless Security Professional. It is a professional-level credential from CWNP, the vendor-neutral certification program for enterprise Wi-Fi. If you searched the acronym and landed on content about a different credential, note that several certifications share these four letters. This page, and this entire site, is about the wireless-security one: the credential that validates your ability to secure enterprise WLANs against attacks, design robust authentication and encryption architectures, and manage the security lifecycle of a wireless network.
For a broader orientation, see our related explainers: What Is CWSP?, CWSP Meaning, and What Is CWSP Certification?. This article focuses specifically on what each word in the name signals and how that maps to the exam you would actually sit.
Where the Credential Sits in the CWNP Program
CWNP organizes its wireless certifications into a progression. CWNA (Certified Wireless Network Administrator) is the foundation. On top of it sit professional-level credentials covering design, analysis, and security. CWSP is the security specialization. Because CWNA is a hard prerequisite, the CWSP title implicitly tells an employer two things: you understand how enterprise Wi-Fi works, and you have gone deep on securing it.
What "Wireless Security Professional" Actually Promises
Each word in the title carries a specific expectation.
- Certified: You passed a proctored, version-controlled exam. CWSP-207 ended December 31, 2025, and CWSP-208, built on the 2025 objectives, is the current version.
- Wireless: The scope is 802.11 WLANs, not general network security. Questions assume you know how clients associate, roam, and authenticate on a wireless medium.
- Security: The focus is on authentication, encryption, key management, attack recognition, and policy, rather than RF design or troubleshooting.
- Professional: It is a professional-level credential, which is why its retake rules and renewal terms differ from entry-level exams.
If you want the one-page version of these ideas, the CWSP cheat sheet distills the must-know facts.
The Four Domains Behind the Name
The CWSP-208 objectives divide the exam into four weighted domains. The weighting is lopsided in a way that shapes everything about preparation.
| Domain | Weight | What It Tests |
|---|---|---|
| Domain 1: Security Policy | 10% | Policy requirements, risk and compliance framing, and how policy drives technical controls |
| Domain 2: Vulnerabilities, Threats, and Attacks | 30% | Recognizing attack types, weaknesses in legacy and current security, and appropriate countermeasures |
| Domain 3: WLAN Security Design and Architecture | 50% | Choosing and designing authentication, encryption, roaming, guest, and infrastructure security solutions |
| Domain 4: Security Lifecycle Management | 10% | Ongoing monitoring, auditing, maintenance, and keeping a secure WLAN secure over time |
Half the exam is design and architecture. That is the clearest signal of what "Professional" means in this credential: you are expected to make design decisions, not just recite definitions. Our complete guide to all four CWSP content areas goes deeper on each domain.
Technical Topics That Define the Exam
The title says "security," but the exam is more specific than that. These are the subject clusters you must be able to reason about in scenario form.
802.1X, RADIUS, and EAP Methods
Enterprise authentication is the backbone of the architecture domain.
- The roles of supplicant, authenticator, and authentication server
- How EAP-TLS, EAP-TTLS, and PEAP differ in credential handling and tunnel behavior
- PKI fundamentals: certificate chains, trust anchors, and what breaks when validation is skipped
WPA3 and Related Mechanisms
Know what each mode is for rather than treating "WPA3" as a single feature.
- WPA3-Personal versus WPA3-Enterprise and the problem each addresses
- OWE (Opportunistic Wireless Encryption) provides encryption for open networks and is distinct from the WPA3 authentication modes
- RSN Override and how it fits into transition and compatibility thinking
Key Hierarchies, Handshakes, and Fast Roaming
Scenario questions often hinge on where a key comes from and when it is derived.
- How master and transient keys relate and what the 4-way handshake establishes
- Why fast roaming mechanisms must preserve security while reducing re-authentication delay
- What a compromised or reused key exposes
Secure Guest Access
Guest design shows up repeatedly because it forces tradeoffs.
- Isolation, captive-portal behavior, and segmentation
- When encryption on an otherwise open network is appropriate
- Balancing usability against exposure of internal resources
Exam Format, Voucher, and Remote Proctoring
Knowing what the name stands for is step one; knowing how the exam is delivered prevents surprises.
| Item | CWSP-208 Detail |
|---|---|
| Questions | 60 multiple-choice, single correct answer |
| Time | 90 minutes |
| Passing score | 70% (80% for instructors) |
| Language | English |
| Voucher | USD $349.99, one attempt, valid two years from purchase or until the exam version ends, whichever is earlier |
| Delivery | CWNP remote proctoring only (not Prometric or Pearson VUE) |
| Retake wait | 10 days, including weekends |
Remote delivery uses Google Meet with the CWNP Learning Center. You need matching, unexpired government-issued photo identification, a working camera and microphone, and a single monitor. Notes, outside assistance, external devices, and unrelated applications are prohibited, and the timer keeps running during approved breaks. A second attempt requires a second voucher. For the full financial picture, read the CWSP certification cost breakdown, and for scheduling logistics see CWSP exam dates and deadlines.
The 70% threshold is a passing score, not a pass rate. They answer different questions, which we unpack in CWSP passing score and what the data shows about pass rates.
The CWNA Prerequisite and What It Means for the Title
You cannot hold CWSP without a current, valid CWNA. That requirement is part of why the credential carries weight: the security knowledge is built on a verified administrator-level foundation. Instructor-led training is optional, so self-study candidates are not blocked. Eligibility details are in CWSP requirements and how to qualify, and training options are covered in CWSP training.
Keeping the Credential Current
The standard validity period is three years. Renewal requires a current CWNA and a pass on the current CWSP exam, which also renews your CWNA for three years. There is also an optional professional continuing education route that must be elected within one year of certification. It requires eight approved, documented CE hours annually plus annual renewal, and the linked guidelines specify that two of those hours include passing the annual certification CE eLearning. Once you elect CE, you cannot revert to the three-year testing cycle, and CE renewal does not by itself renew CWNA.
Who Uses the Title
The Certified Wireless Security Professional title is most relevant to people who design, secure, or audit enterprise wireless: wireless and network engineers, security engineers responsible for access layers, architects specifying authentication infrastructure, and consultants assessing WLAN risk. Employers in healthcare, education, government, and large campus environments tend to care because their wireless estates carry mixed device populations and compliance obligations. We avoid quoting salary numbers because public data specific to this exact credential is thin; see CWSP jobs, the salary guide, and the ROI analysis for a qualitative treatment of the career case.
Sequencing Your Study Around the Weighting
Because the architecture domain is half the exam, front-load it rather than spreading time evenly across domains. A compact plan tied to the weighting looks like this:
Authentication Architecture
- 802.1X, RADIUS, and the EAP methods
- PKI and certificate validation behavior
Encryption, Keys, and Roaming
- WPA3 modes, OWE, and RSN Override
- Key hierarchies, handshakes, and fast roaming
- Secure guest access design
Attacks and Countermeasures
- Threat recognition and the right defensive response
Policy, Lifecycle, and Practice
- Policy and lifecycle domains (10% each)
- Timed CWSP-208 practice questions
Use materials aligned to CWSP-208 and the 2025 objectives rather than unreviewed question banks for retired versions. Our CWSP study guide expands this plan, and how hard the exam really is helps you calibrate your timeline. When you are ready to test yourself, try the CWSP practice tests built around original scenario questions.
Key Takeaway
The name tells you the exam's center of gravity: security design for wireless. Spend your hours where the weight is, and treat every topic as a scenario in which you must justify a design choice.
Frequently Asked Questions
CWSP stands for Certified Wireless Security Professional, a credential issued by CWNP (Certified Wireless Network Professional) that validates enterprise WLAN security skills.
No. Several credentials share the letters CWSP, but this one is specifically the CWNP wireless-security certification. Fees, domains, and renewal rules from other credentials do not apply to it.
CWSP-208, based on the 2025 objectives, is current. CWSP-207 ended December 31, 2025. CWNP's sources differ on whether CWSP-208 launched in November or December 2025, but both identify it as the current exam.
Yes. A current, valid CWNA is required to earn the CWSP credential. Instructor-led training is optional.
Only through CWNP remote proctoring, not Prometric or Pearson VUE. You need government-issued photo ID, a camera, a microphone, and a single monitor. Exam rules are strict, so review them before test day.