In a WLAN network with the WIDS function enabled, which of the following devices will not trigger an illegal device alarm when it is judged as an illegal device? (Multiple choice)

Question

Options

• AAP
• BAd-hoc
• CWireless bridge
• DSTA

• A
  15% (4)
• B
  85% (22)

Explanation

In Huawei's WIDS implementation, the illegal device alarm is specifically designed to flag unauthorized APs (rogue APs) - infrastructure devices that could be set up maliciously to lure clients. Ad-hoc networks (B), wireless bridges (C), and STAs (D) are detected and classified by WIDS, but they trigger separate, dedicated alarm types (e.g., ad-hoc alarms, interference alarms, or unauthorized client alarms) rather than the "illegal device" alarm category. Only option A (AP) is the device type whose unauthorized presence maps directly to the illegal device alarm, which is why A is the incorrect choice (distractor) and B, C, D are correct. The reasoning is that rogue APs pose a uniquely severe infrastructure-level threat - impersonating legitimate network access points - warranting their own dedicated alarm, while non-AP device types are handled under different detection rules.

Memory tip: Think "Only APs = Alarm Producers" - in WIDS, the illegal device alarm is an AP-specific alarm. Everything else (clients, ad-hoc peers, bridges) gets its own alarm bucket, so they are excluded from this particular trigger.

No community discussion yet for this question.