Which of the following tools monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools?

A generic IDS analyzes wired network packet streams for known attack signatures but cannot scan the radio frequency spectrum for wireless threats.

Snort is an open-source network IDS/IPS that inspects wired packet captures and rule-based signatures and has no capability to monitor the wireless radio spectrum.

A firewall enforces access control based on network and transport layer rules on wired traffic and has no mechanism to detect rogue RF activity.

WIPS actively monitors the RF spectrum around an organization to identify unauthorized or rogue access points that could allow attackers to bypass wired perimeter defenses. It also detects active use of wireless attack tools such as deauthentication flood tools or evil-twin APs impersonating legitimate infrastructure. No other option listed has the radio-frequency awareness required for this specific function.