You have been instructed to look in an AOS Security Dashboard's client list. Your goal is to find clients that belong to the company and have connected to devices that might belong to hackers. Which…

Question

Options

• AMAC address: d8:50:e6:f3:6d:a4; Client Classification: Authorized; AP Classification: Suspected
• BMAC address: d8:50:e6:f3:6e:c5; Client Classification: Interfering; AP Classification: Neighbor
• CMAC address: d8:50:e6:f3:6e:60; Client Classification: Interfering; AP Classification: Interfering
• DMAC address: d8:50:e6:f3:70:ab; Client Classification: Interfering; AP Classification: Suspected

• A
  77% (47)
• B
  8% (5)
• C
  11% (7)
• D
  3% (2)

Explanation

The AOS Security Dashboard in an AOS-8 solution (Mobility Controllers or Mobility Master) provides a client list through its Wireless Intrusion Prevention (WIP) system, showing the classification of clients and the APs they are connected to. The goal is to identify clients that belong to the company (Authorized clients) and have connected to devices that might belong to hackers (rogue or suspected rogue APs). Client Classification: Authorized: A client that has successfully authenticated to an authorized AP and is part of the company's network (e.g., an employee device). Interfering: A client that is not authenticated to the company's network and is considered external or potentially malicious. AP Classification: Authorized: An AP that is part of the company's network and managed by the MC. Suspected Rogue: An AP that is not authorized and is suspected of being malicious, often because it exhibits suspicious behavior (e.g., a BSSID close to an authorized AP, indicating potential spoofing). Neighbor: An AP that is not part of the company's network but is not connected to the wired network (e.g., a nearby AP from another organization). Interfering: An AP that is not part of the company's network and may be causing interference, but is not necessarily malicious. The requirement is to find a client that is Authorized (belongs to the company) and connected to a Suspected Rogue AP (might belong to hackers).

No community discussion yet for this question.