How STAs Learn an AP SSID Before Association

H12-811 By islever Editorial Last updated Nov 5, 2026

WLAN Working Principles and Configuration WLAN Technology Basics

Short answer

ACD Before association, the STA learns the AP’s SSID through Beacon, Probe Request, and Probe Response frames, while Discovery is a scanning process, not a packet.

Question

Which of the following packets are exchanged between STAs and an AP to obtain the AP’s SSID before association with the AP? (Choose all that apply.)

Probe Request Correct Answer
Discovery
Beacon Correct Answer
Probe Response Correct Answer

Key Takeaways

This question tests 802.11 SSID discovery frame types and traps candidates who mistake the Discovery procedure for an actual management frame.

In 802.11 pre-association discovery, an STA learns an AP’s SSID via Beacon frames, Probe Requests, and Probe Responses; Discovery is a process, not a frame.

Common mistake: The most plausible wrong answer is AD: assuming the STA must initiate discovery and that Beacon is irrelevant, which overlooks passive scanning where the AP advertises the SSID in a Beacon.

Expert Analysis

Pre-association objective

Before a STA can associate with an AP, it must identify the wireless network by SSID. This identification happens in the discovery phase, before authentication and association, and the question does not force active or passive scanning. The full 802.11 discovery exchange must therefore be considered rather than only the STA-initiated path.

Passive path — Beacon

In passive scanning, the AP periodically transmits a Beacon management frame. That frame advertises the BSS and normally carries the SSID, BSSID, channel, and capabilities, so the STA can learn the SSID without sending anything first. This makes option C correct.

Active path — Probe Request and Probe Response

In active scanning, the STA transmits a Probe Request, either naming the SSID it wants or using a wildcard SSID to ask all nearby APs. An AP that matches replies with a Probe Response carrying its SSID and other network details. Therefore option A is the solicitation step and option D is the AP's answer; both belong to the SSID discovery exchange before association. A discussion that selects only A and D describes active scanning but omits Beacon, while a selection of A and C omits the Probe Response needed in active discovery.

Why Discovery is not a frame

Option B is the trap. “Discovery” is the name of the scanning process (passive or active), not an IEEE 802.11 packet type exchanged over the air. The actual frames are Beacon, Probe Request, and Probe Response.

Conclusion

Tracing the path: AP Beacon → STA learns SSID (passive); or STA Probe Request → AP Probe Response → STA learns SSID (active). Since the stem asks which packets are exchanged to obtain the AP's SSID before association and does not limit the scan mode, the correct set is A, C, and D.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

For 802.11 discovery questions, separate frame names from procedure names: Beacon, Probe Request, and Probe Response are actual management frames, while Discovery is the scanning process. Trace which side initiates each exchange—AP sends Beacon, STA sends Probe Request, AP replies with Probe Response—and check whether the stem limits you to passive or active scanning. If it does not, include every frame that carries or solicits the SSID before association.

Frequently Asked Questions

Does the STA need both Beacon and Probe Response to learn the SSID?

No. Passive scanning uses Beacon frames, while active scanning uses Probe Request and Probe Response. In a given scan the STA may receive a Beacon or a Probe Response, but all three frame types are part of SSID discovery before association.

Why is Discovery not a correct packet type?

Discovery is the overall process of finding a WLAN, not an IEEE 802.11 management frame. The actual frames here are Beacon, Probe Request, and Probe Response.

What SSID does a wildcard Probe Request carry?

A wildcard Probe Request uses a zero-length SSID to ask all nearby APs to respond. Each AP’s Probe Response then carries its own SSID so the STA can choose a network.

More H12-811 FAQ →

Community Votes

50%

33%

17%

50% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

hafizhou 👍 2

AC is correct
andrpercud 👍 1

o obtain the AP's SSID before association, the following packets are exchanged between STAs (Station) and an AP (Access Point): Probe Request: This packet is sent by the STA to discover nearby APs and includes the SSID it is looking for (or a request for all SSIDs). Beacon: This packet is regularly transmitted by the AP to announce its presence and includes the SSID and other network information. Probe Response: This packet is sent by the AP in response to a Probe Request. It contains information about the AP, including the SSID. Summary of Correct Answers: Probe Request Beacon Probe Response The option Discovery is not a specific packet type used in this context.
Fmoura17 👍 1

A, C, D are correct. Probe Request – STA broadcasts "who's out there?" to find APs Beacon – AP periodically broadcasts its SSID to all nearby STAs Probe Response – AP replies to the STA with its SSID details Discovery – doesn't exist in 802.11 ❌
js293 👍 1

question said first STA so it is supose STA discover SSID. So in this case is a active mode of discovery where STA starts.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

← Back to H12-811 Study Guide