7.2 Manage Alarms and Rogues (APs and Clients) 300-430 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A network administrator is troubleshooting a wireless issue where clients are experiencing intermittent connectivity. The WLC shows a high number of 'Client Association Failure' alarms, but the administrator suspects these are not all genuine failures. What should the administrator do to reduce false alarms and better understand the actual issue?

   • AConfigure the WLC to send all alarms to a syslog server for later analysis.
   • BDisable the 'Client Association Failure' alarm category entirely to stop the noise.
   • CChange the alarm severity to 'Critical' so that only critical failures are reported.
   • DIncrease the alarm threshold for 'Client Association Failure' to a higher value so that only sustained failures trigger an alarm.
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A network administrator is troubleshooting a wireless issue where clients are experiencing intermittent disconnects. The WLC shows a high number of 'Rogue AP detected' alarms, but Cisco Catalyst Center does not show any corresponding alarms. The WLC is integrated with Cisco Catalyst Center. What is the most likely cause of this discrepancy?

   • AAlarm forwarding is not enabled on the WLC or the integration is misconfigured.
   • BThe rogue APs are not actually rogues and are being falsely detected.
   • CCisco Catalyst Center is configured to suppress all rogue alarms.
   • DThe WLC is not sending syslog messages to Cisco Catalyst Center.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A wireless administrator detects an unauthorized access point on the corporate network. The AP is broadcasting a valid corporate SSID but is not managed by the WLC. The administrator wants to prevent clients from associating with this rogue AP while allowing the WLC to continue monitoring it. What should the administrator do?

   • AIncrease the WLC's rogue detection interval to improve accuracy.
   • BAdd the rogue AP to the WLC's rogue containment list and enable containment for the offending SSID.
   • CDisable the corporate SSID on all managed access points to avoid confusion.
   • DManually add the rogue AP's MAC address to the WLC's trusted list.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An administrator wants to receive an email notification when a critical alarm is raised in Cisco Catalyst Center. Which feature should be configured?

   • ANotification settings
   • BAlarm filter
   • CAlarm severity threshold
   • DAlarm category
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is using Cisco Catalyst Center to investigate a potential rogue client that is attempting to connect to the corporate network. The analyst wants to determine if the client is truly rogue or if it is a legitimate device that is misconfigured. What information should the analyst examine in Catalyst Center?

   • AThe client's MAC address, IP address, and connection history to see if it has previously connected to the network.
   • BThe client's SSID and security settings to see if it is attempting to use the corporate SSID.
   • CThe client's vendor OUI and device type to determine if it is a known device model.
   • DThe client's signal strength and the AP it is associated with to determine if it is physically located in the building.
   Reveal Solution Discussion Select an answer first