nerdexam
Cisco

300-430 · Question #303

A network administrator wants to receive an email notification whenever their wireless network detects a rogue AP that is stronger than -65 dBm. To accomplish this, Cisco Prime Infrastructure must be

The correct answer is C. Set to Rule Type "Malicious," Notify "Email", and include condition "RSSI" with a value of "-65. Cisco Prime Infrastructure rogue AP rules must use Rule Type 'Malicious' to classify the AP and Notify 'Email' to send an email alert, combined with an RSSI condition threshold.

Monitoring and Troubleshooting

Question

A network administrator wants to receive an email notification whenever their wireless network detects a rogue AP that is stronger than -65 dBm. To accomplish this, Cisco Prime Infrastructure must be used to create and install configuration templates that establish a rogue AP rule. Which rule configuration must be used?

Options

  • ASet to Rule Type "Email", Notify "All", and include condition "RSSI" with a value of "-65 dBm."
  • BSet to Rule Type "Malicious," Notify "All", and include condition "RSSI" with a value of "-65 dBm."
  • CSet to Rule Type "Malicious," Notify "Email", and include condition "RSSI" with a value of "-65
  • DSet to Rule Type "Malicious," Notify "Enabled", and include condition "RSSI" with a value of -65

How the community answered

(64 responses)
  • A
    3% (2)
  • B
    9% (6)
  • C
    83% (53)
  • D
    5% (3)

Why each option

Cisco Prime Infrastructure rogue AP rules must use Rule Type 'Malicious' to classify the AP and Notify 'Email' to send an email alert, combined with an RSSI condition threshold.

ASet to Rule Type "Email", Notify "All", and include condition "RSSI" with a value of "-65 dBm."

'Email' is not a valid Rule Type in Prime Infrastructure; rule types are classifications such as Malicious, Friendly, or Unclassified, not notification methods.

BSet to Rule Type "Malicious," Notify "All", and include condition "RSSI" with a value of "-65 dBm."

Notify 'All' would trigger all configured notification methods rather than targeting email specifically, and does not guarantee an email notification is sent.

CSet to Rule Type "Malicious," Notify "Email", and include condition "RSSI" with a value of "-65Correct

Rule Type 'Malicious' is the correct classification that triggers active notification actions in Prime Infrastructure rogue rules.

DSet to Rule Type "Malicious," Notify "Enabled", and include condition "RSSI" with a value of -65

Notify 'Enabled' is not a valid notification value for targeting email; it does not specify email as the delivery mechanism for the alert.

Concept tested: Cisco Prime Infrastructure rogue AP rule email notification

Source: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-9/user/guide/bk_CiscoPrimeInfrastructure_3_9_UserGuide/bk_CiscoPrimeInfrastructure_3_9_UserGuide_chapter_010001.html

Topics

#rogue AP detection#RSSI threshold#Prime Infrastructure#email notification

Community Discussion

No community discussion yet for this question.

Full 300-430 Practice