7.2 Manage Alarms and Rogues (APs and Clients) 300-430 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In Cisco Catalyst Center, which interface allows an administrator to view a list of alarms and filter them by severity?

   • ACommand Runner
   • BNetwork Topology
   • CAlarm Dashboard
   • DDevice Inventory
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network engineer notices that the WLC is generating a high volume of minor alarms for transient RF interference, which is drowning out more critical alerts. The engineer wants to reduce the noise without completely disabling the alarm category. Which action should be taken on the WLC?

   • ADisable the RF interference alarm category entirely to stop all related notifications.
   • BChange the alarm severity threshold for the RF interference category to 'Major' so only more significant events trigger alarms.
   • CIncrease the polling interval for all access points to reduce the frequency of alarm checks.
   • DSet the alarm severity to 'Critical' for all categories to prioritize the most important alerts.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network administrator notices that the WLC is generating a high volume of alarm notifications for low-severity events, such as client association failures and transient RF interference. These alarms are overwhelming the NOC and causing important critical alarms to be missed. The administrator wants to reduce noise while still ensuring that security-related events, such as rogue AP detection, are immediately visible. What should the administrator do on the WLC?

   • AAdjust the severity threshold for non-security alarm categories and ensure the 'Security' category is set to a low threshold or always notify.
   • BSet all alarm categories to 'Informational' severity so that every event is logged but only critical alarms are emailed.
   • CDisable alarm notifications for the 'Security' category and keep all other categories at default.
   • DIncrease the severity threshold for all alarm categories so that only critical alarms are sent.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network team uses Cisco Catalyst Center to monitor a large wireless deployment. They need to receive immediate email notifications for any alarm related to rogue APs, but only during business hours. Which configuration should be used?

   • AEnable global email notifications for all alarms in Cisco Catalyst Center.
   • BSet the alarm severity to 'Critical' for all rogue AP events.
   • CCreate an alarm notification policy that filters on the 'Rogue AP' category and set the notification schedule to business hours.
   • DConfigure the WLC to send syslog messages to the email server.
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A university has a wireless network with thousands of clients. Cisco Catalyst Center has detected a rogue AP that is mimicking the university's SSID. The rogue AP is located near a lecture hall where many students connect. The network team wants to contain the rogue AP but is worried about the performance impact on the managed APs that will perform containment. What should they consider?

   • AContainment should be disabled because the rogue AP is only mimicking the SSID and is not a real threat.
   • BContainment will have no impact on managed AP performance because it is done in the background.
   • CContainment will consume airtime on the managed APs, potentially degrading performance for legitimate clients.
   • DThe WLC will automatically balance the load between managed APs to avoid any performance impact.
   Reveal Solution Discussion Select an answer first