300-370 · Question #129
Which statement about the process of rogue containment performed on a rogue AP and rogue clients is true?
The correct answer is C. An authorized AP spoofs de-authentication packets that have the spoofed source address of. Rogue containment involves an authorized AP sending de-authentication packets to disassociate clients from a rogue AP.
Question
Which statement about the process of rogue containment performed on a rogue AP and rogue clients is true?
Options
- ATrusted clients are configured to ignore the rogue AP so that only the rogue clients can
- BAn RF jammer is used to prevent the rogue AP from transmitting.
- CAn authorized AP spoofs de-authentication packets that have the spoofed source address of
- DA trusted AP is configured to mimic the rogue AP and to prevent clients from associating to the
How the community answered
(39 responses)- B3% (1)
- C92% (36)
- D5% (2)
Why each option
Rogue containment involves an authorized AP sending de-authentication packets to disassociate clients from a rogue AP.
Trusted clients are not typically configured to ignore rogue APs; the containment action directly targets the rogue AP and its associated clients.
Using an RF jammer is generally illegal and not a standard, authorized method for rogue AP containment due to its potential to disrupt legitimate wireless services.
An authorized AP performs rogue containment by spoofing de-authentication packets with the rogue AP's MAC address as the source. This tricks legitimate clients into disconnecting from the rogue AP, effectively isolating the rogue AP from clients.
Mimicking a rogue AP is a form of honeypot or evil twin attack, not a standard method of rogue containment performed by an authorized AP.
Concept tested: Wireless rogue AP containment methods
Source: https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-wlc/113444-wlc-rogue-faq.html
Topics
Community Discussion
No community discussion yet for this question.