300-430 Question 122
Single answerA network administrator at a large enterprise notices multiple rogue access points (APs) being flagged by the Cisco Wireless LAN Controller (WLC). To mitigate the potential security risk, the administrator decides to classify these rogue APs. Which action should the administrator take to classify a rogue AP as a threat using the Cisco WLC?
- A
Manually classify the rogue AP as malicious through the WLC interface
- B
Enable rogue AP auto-classification on the WLC for all detected APs
- C
Configure the WLC to perform rogue location tracking and automatically disconnect clients
- D
Use Cisco Prime Infrastructure to block the rogue AP from the network
Show answer and explanation
Correct answer: A
Explanation
To effectively mitigate rogue AP threats in a Cisco wireless network, the administrator should manually classify rogue APs as malicious using the WLC interface. This action ensures that the AP is appropriately flagged, and containment measures can be applied. While other options provide useful supplementary actions like tracking or monitoring, manual classification is the required step to designate the rogue AP as a threat.
- A. Correct.
Correct. The Cisco WLC allows administrators to manually classify rogue APs as malicious, contained, or friendly using the WLC interface. This is a direct and precise action to mitigate rogue AP threats.
- B. Incorrect.
Incorrect. Enabling rogue AP auto-classification on the WLC may not be precise as it can misclassify legitimate devices or benign APs. Manual classification provides better control.
- C. Incorrect.
Incorrect. Rogue location tracking can help identify the physical location of the rogue AP, but it does not classify it as a threat or take immediate action.
- D. Incorrect.
Incorrect. Cisco Prime Infrastructure can assist in monitoring and managing rogue APs but does not directly classify or mitigate them through the WLC.