300-425 Question 145
Select 3A network administrator has been tasked with identifying the location of a rogue access point in the enterprise network. The network uses Cisco DNA Center and Cisco Wireless LAN Controllers (WLCs) to manage its wireless infrastructure. Which of the following methods can the administrator use to detect and locate the rogue access point effectively?
- A
Use Cisco DNA Center's Rogue Management feature to visualize the rogue access point on a floor map.
- B
Configure the WLC to enable rogue detection and monitor for unauthorized SSIDs.
- C
Use Cisco Prime Infrastructure to deploy a dedicated rogue AP detection sensor.
- D
Leverage the CleanAir feature on supported Cisco APs to detect and locate the rogue AP using interference pattern analysis.
- E
Manually walk around the premises with a wireless scanning tool to locate the rogue AP.
Show answer and explanation
Correct answers: A, B, D
Explanation
Detecting and locating rogue access points in an enterprise network requires leveraging the tools and technologies provided by Cisco's wireless solutions. Cisco DNA Center's Rogue Management feature, WLC rogue detection, and CleanAir technology are the most effective solutions for detecting and locating rogue APs. These technologies use centralized management and advanced telemetry to streamline the process, making manual scanning unnecessary except as a last resort.
- A. Correct.
Correct: Cisco DNA Center's Rogue Management feature provides a centralized platform to visualize and locate rogue access points on floor maps based on telemetry from Cisco APs.
- B. Correct.
Correct: Enabling rogue detection on the WLC allows the wireless infrastructure to identify unauthorized SSIDs and report their locations.
- C. Incorrect.
Incorrect: Cisco Prime Infrastructure is not specifically used for rogue detection but rather for network monitoring and management. Rogue detection is better suited for DNA Center or WLC.
- D. Correct.
Correct: CleanAir technology can detect rogue devices by analyzing interference patterns and providing their approximate location.
- E. Incorrect.
Incorrect: While manually locating rogue APs with a scanning tool is possible, it is not an efficient or scalable solution in an enterprise environment and is not the best practice for this scenario.