300-430 Question #175: Real Exam Question with Answer & Explanation

The correct answer is D: Adaptive wIPS Top 10 APs. The Adaptive wIPS Top 10 APs report in Cisco Prime Infrastructure identifies the access points that have experienced the greatest number of wireless intrusion attack events, enabling engineers to correlate client issues with attack-heavy locations.

Question

An engineer is concerned that a wireless attack is causing client connectivity issues. Which Cisco Prime Infrastructure report does the engineer run to determine if the user was in an area afflicted by a large number of attacks?

Options

ANetFlow v7
BNew Rogue APs
CAVC Troubleshooting
DAdaptive wIPS Top 10 APs

Explanation

The Adaptive wIPS Top 10 APs report in Cisco Prime Infrastructure identifies the access points that have experienced the greatest number of wireless intrusion attack events, enabling engineers to correlate client issues with attack-heavy locations.

Common mistakes.

A. NetFlow v7 is a traffic flow telemetry protocol used to analyze bandwidth consumption and application flows, and it does not capture or report wireless intrusion attack events.
B. The New Rogue APs report tracks unauthorized access points detected on the network, which is a discovery and rogue management function rather than a report of active attacks against clients.
C. AVC (Application Visibility and Control) Troubleshooting reports are used to diagnose application performance and traffic classification issues, not to identify geographic areas impacted by wireless security attacks.

Concept tested. Cisco Prime Infrastructure Adaptive wIPS attack location reporting

Reference. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/wips.html

Community Discussion

No community discussion yet for this question.

Full 300-430 Practice