300-425 Question 184
Select 3An organization is deploying a wireless intrusion prevention system (wIPS) using Cisco DNA Center to enhance their wireless security. During the configuration process, the engineer must ensure that the wIPS is properly implemented to detect and mitigate rogue access points. Which of the following steps are required to successfully configure wIPS using Cisco DNA Center?
- A
Enable wIPS on the wireless LAN controller (WLC) and synchronize it with Cisco DNA Center.
- B
Configure the APs in Monitor Mode in Cisco DNA Center.
- C
Assign the APs to a wIPS policy in Cisco DNA Center.
- D
Define security profiles for rogue AP detection in the Cisco DNA Center Assurance dashboard.
- E
Enable wIPS under the Wireless Settings section in Cisco DNA Center.
Show answer and explanation
Correct answers: A, B, C
Explanation
To implement wIPS using Cisco DNA Center, the engineer must integrate the WLC with Cisco DNA Center, configure APs in Monitor Mode, and assign them to a wIPS policy. These steps ensure that the wireless infrastructure is capable of detecting and mitigating security threats such as rogue APs. Other options, like defining profiles in the Assurance dashboard or enabling wIPS in a nonexistent setting, are not relevant to the configuration process.
- A. Correct.
Enabling wIPS on the WLC and synchronizing it with Cisco DNA Center is a fundamental step to ensure that wIPS functionality is integrated into the wireless infrastructure.
- B. Correct.
APs need to be configured in Monitor Mode to perform scanning and detect threats effectively in the wireless environment. This is a key requirement for wIPS functionality.
- C. Correct.
APs must be assigned to a wIPS policy in Cisco DNA Center to apply the desired security rules and ensure proper monitoring and mitigation of threats.
- D. Incorrect.
Defining security profiles for rogue AP detection is not done in the Assurance dashboard. It is typically part of the policy configuration process within Cisco DNA Center, not the Assurance analytics interface.
- E. Incorrect.
There is no specific 'Enable wIPS' option under the Wireless Settings section in Cisco DNA Center; the wIPS configuration is managed through policies and AP mode settings.