nerdexam
Cisco

200-301 · Question #440

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an a

The correct answer is D. Enable the Protected Management Frame service and set the Comeback timer to 10. Step 1. You need to enable protected management frame under the SSID configured with 802.1x/PSK. You have three options as shown in the image. Step 2. You then need to specify the Comeback timer and SA query timeout. Comeback timer specifies the time which an associated client mu

Submitted by manish99· Mar 5, 2026Security Fundamentals

Question

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

Options

  • AEnable Security Association Teardown Protection a d set the SA Query timeout to 10
  • BEnable MAC filtering and set the SA Query timeout to 10
  • CEnable 802.1x Layer 2 security and set me Comeback timer to 10
  • DEnable the Protected Management Frame service and set the Comeback timer to 10

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    13% (6)
  • C
    9% (4)
  • D
    76% (34)

Explanation

Step 1. You need to enable protected management frame under the SSID configured with 802.1x/PSK. You have three options as shown in the image. Step 2. You then need to specify the Comeback timer and SA query timeout. Comeback timer specifies the time which an associated client must wait before the association can be tried again when first denied with a status code 30. SA query timeout specifies the amount of time the WLC waits for a response from the client for the query process. If there is no response from the client, its association is deleted from the controller. This is done as shown in the image. configure-802-11w-management-frame-prote.html#anc8

Topics

#WLC security#Protected Management Frame#Wireless anti-spoofing#Comeback timer

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice