In Cisco Catalyst Center, what does a wIPS alarm typically indicate?

A normal network performance metric

A potential wireless security threat or anomaly detected by a wIPS sensor

A configuration change made by an administrator

A notification that a client has roamed to another AP

A security manager wants to compare the number of wireless attacks detected each month for the past year. The manager also wants to see the top 5 attack types. What is the most efficient way to get this information from Catalyst Center?

Use the sensor health dashboard

What is a common cause of false positives in a wIPS deployment that an administrator should investigate when troubleshooting?

The Catalyst Center is not receiving syslog messages.

The wireless controller is running an outdated firmware version.

The wIPS profile has signatures that are too sensitive for the environment.

The access points are not in monitor mode.

A hospital's security team notices that the wIPS is generating a high volume of alarms for a legitimate medical telemetry system that uses a proprietary protocol. The alarms are flooding the dashboard and masking real threats. What should you do in Catalyst Center to reduce the noise while still detecting actual attacks?

Disable the wIPS profile on the affected APs

Create a custom signature rule to whitelist the telemetry protocol

Increase the alarm severity threshold globally

In a Cisco Catalyst Center wIPS deployment, which component is responsible for receiving and correlating rogue reports from access points and forwarding them to the Catalyst Center for analysis?

The Identity Services Engine (ISE)

The access point in monitor mode

The Cisco DNA Center appliance itself

The wireless LAN controller (WLC)

CiscoCertified Network Professional Enterprise Wireless (ENWLSI)

Domain 5Objective 5

5.5 Implement wIPS Using Cisco Catalyst Center (formerly Cisco DNA Center) 300-430 Practice Questions (Page 6)

Part of the Advanced Location Services domain, which accounts for 10% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

10%of the exam

Questions 26–30

26foundation · easy
In Cisco Catalyst Center, what does a wIPS alarm typically indicate?
Select an answer first
27expert · hard
A security manager wants to compare the number of wireless attacks detected each month for the past year. The manager also wants to see the top 5 attack types. What is the most efficient way to get this information from Catalyst Center?
Select an answer first
28foundation · easy
What is a common cause of false positives in a wIPS deployment that an administrator should investigate when troubleshooting?
Select an answer first
29application · medium
A hospital's security team notices that the wIPS is generating a high volume of alarms for a legitimate medical telemetry system that uses a proprietary protocol. The alarms are flooding the dashboard and masking real threats. What should you do in Catalyst Center to reduce the noise while still detecting actual attacks?
Select an answer first
30foundation · easy
In a Cisco Catalyst Center wIPS deployment, which component is responsible for receiving and correlating rogue reports from access points and forwarding them to the Catalyst Center for analysis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 300-430

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.