5.5 Implement wIPS Using Cisco Catalyst Center (formerly Cisco DNA Center) 300-430 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A network admin is troubleshooting a wIPS false positive. The alarm is for 'Rogue AP Detected' on a specific channel. The admin has verified that the AP is actually a legitimate AP from a neighboring business. The admin wants to suppress the alarm without disabling rogue AP detection. What should the admin do?

   • ADisable rogue AP detection
   • BAdd the neighboring AP's BSSID to the exclusion list
   • CIncrease the alarm severity for rogue APs
   • DChange the AP to monitor mode
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company wants to correlate wIPS alarms with network flow data to identify the source of a wireless attack that is also generating suspicious traffic on the wired network. Which integration should you enable in Catalyst Center to achieve this?

   • ASNMP
   • BISE pxGrid
   • CStealthwatch
   • DSyslog server
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial firm is using Catalyst Center wIPS and receives an alarm for a 'rogue AP' that is broadcasting the corporate SSID. The security team wants to automatically block the rogue AP and also notify the network administrator. What integration should they use?

   • AUse the wIPS alarm action to send an email and automatically contain the rogue AP via the wireless controller
   • BIntegrate Catalyst Center with ISE to trigger a quarantine policy for the rogue AP
   • CConfigure Catalyst Center to send the alarm to Stealthwatch for analysis and automated response
   • DManually locate the rogue AP using the wIPS report and then block it on the firewall
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a primary characteristic of an access point operating in dedicated monitor mode for wIPS?

   • AIt provides wireless client access on all radios.
   • BIt alternates between serving clients and monitoring on the same radio.
   • CIt uses all radios to scan the airwaves and does not serve client traffic.
   • DIt only monitors the channel that its clients are using.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In Cisco Catalyst Center, what is the purpose of a wIPS profile?

   • ATo define the RF parameters for access point radios
   • BTo assign IP addresses to wireless clients
   • CTo specify which security policies, signatures, and custom rules are applied to detect wireless threats
   • DTo configure the SSID and security settings for a wireless network
   Reveal Solution Discussion Select an answer first