Which AP mode allows an engineer to scan configured channels for rogue access points?

Question

Options

• Asniffer
• Bmonitor
• Cbridge
• Dlocal

• B
  93% (14)
• D
  7% (1)

Explanation

Monitor mode is specifically designed for dedicated rogue AP detection and mitigation - the AP does not serve clients but instead scans all configured channels continuously, listening for unauthorized or rogue access points and reporting findings to the wireless controller.

Why the distractors are wrong:

• A (Sniffer): Sniffer mode captures 802.11 traffic and forwards packets to a protocol analyzer (like Wireshark) for troubleshooting - it's about packet capture, not rogue detection.
• C (Bridge): Bridge mode connects network segments (e.g., building-to-building links) wirelessly - it's about connectivity, not scanning.
• D (Local): Local is the standard AP mode where the AP serves client traffic normally - it's the default operational mode, not a dedicated scanning mode.

Memory Tip: Think of Monitor = Monitoring the airwaves like a security guard watching for intruders (rogue APs), while a Local AP is just a regular employee doing its normal job of serving clients. "Monitor mode monitors for threats" - the alliteration helps it stick!

No community discussion yet for this question.