300-430 Question 240
Select 3An enterprise network administrator is monitoring the wireless infrastructure using Cisco DNA Center and notices several rogue access points (APs) being flagged. The administrator wants to ensure that only officially deployed APs are allowed to operate in the network. Which of the following actions should the administrator take to address the rogue APs?
- A
Mark the rogue APs as 'Friendly' in Cisco DNA Center to prevent false positives in the future.
- B
Enable rogue containment on the wireless LAN controller (WLC) to mitigate the detected rogue APs.
- C
Use RF classification to identify the channel interference caused by the rogue APs.
- D
Classify the rogue APs as 'Malicious' and initiate containment to block their activity on the network.
- E
Perform a site survey to physically locate the rogue APs and remove unauthorized devices.
Show answer and explanation
Correct answers: B, D, E
Explanation
Rogue APs pose a security threat to enterprise networks as they can be used to intercept data or launch attacks. Effective management includes enabling containment on the WLC, classifying malicious APs to block their activity, and physically locating and removing unauthorized devices. These actions ensure the network remains secure and interference-free while addressing rogue AP threats comprehensively.
- A. Incorrect.
Marking rogue APs as 'Friendly' is only applicable if the APs are mistakenly flagged but are actually part of your authorized infrastructure. This does not address truly unauthorized rogue APs.
- B. Correct.
Enabling rogue containment on the WLC can help mitigate and block the rogue APs' signals, preventing them from interfering with your network.
- C. Incorrect.
While RF classification identifies channel interference, it does not actively address or mitigate rogue AP activity.
- D. Correct.
Classifying rogue APs as 'Malicious' and initiating containment is an effective way to block their activity and protect the network from potential threats.
- E. Correct.
Performing a site survey to physically locate rogue APs is a practical step to identify and remove unauthorized devices from the premises.