7.2 Manage Alarms and Rogues (APs and Clients) 300-430 Practice Questions (Page 8)

Questions 36–39

1. 36application · medium

   A security team wants to automatically contain rogue APs detected by Cisco Catalyst Center. They have integrated their WLCs with Cisco Catalyst Center. What must be configured to enable automatic containment?

   • AEnable the auto-contain option in the rogue management settings in Cisco Catalyst Center.
   • BConfigure SNMP traps on the WLC to trigger containment.
   • CManually contain each rogue AP from the WLC GUI.
   • DSet the rogue AP classification to 'Trusted'.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   How does Cisco Catalyst Center primarily obtain information about rogue access points in a wireless network?

   • ABy performing active scans from Catalyst Center
   • BBy using external cloud-based sensors
   • CBy integrating with the WLC
   • DBy analyzing NetFlow data
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A network administrator is using Cisco Catalyst Center to manage rogue APs across multiple WLCs. The administrator wants to automatically classify any AP that is not managed by the corporate WLCs but is broadcasting a known corporate SSID as a rogue. Which approach should be used?

   • AConfigure a rogue classification rule in Cisco Catalyst Center that matches the corporate SSID and sets the state to 'Rogue'.
   • BAdd all unmanaged APs to the trusted list in Cisco Catalyst Center.
   • CManually mark each unmanaged AP as rogue in the WLC GUI.
   • DEnable the 'Auto-Contain' feature on all WLCs.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A wireless administrator is using a WLC to monitor for rogue APs. The WLC has detected a rogue AP, but the administrator is unsure if it is a real threat or a neighboring business's AP. What should the administrator do to classify the rogue AP correctly?

   • AAdd the AP's MAC address to the 'Friendly' list to stop alarms, assuming it is a neighbor's AP.
   • BEnable containment on the AP to prevent clients from associating, regardless of whether it is a threat.
   • CUse the WLC's rogue location feature to determine the physical location of the AP and compare it to known company APs.
   • DDisable the WLC's rogue detection feature to avoid false positives.
   Reveal Solution Discussion Select an answer first