Which of the following solutions will detect and disable a rogue access point?

A port scan probes hosts for open TCP/UDP ports to enumerate services - it identifies what is running on known hosts but cannot detect or disable an unauthorized wireless access point.

A packet sniffer (protocol analyzer) captures and decodes network traffic for analysis but is purely passive and has no capability to disable or block any device.

An IPS operates inline with network traffic and is capable of active responses - it can detect the unauthorized MAC address or SSID of a rogue AP through RF scanning or wired-side analysis and then automatically take containment actions such as port shutdowns, ACL enforcement, or wireless deauthentication attacks. This distinguishes it from passive monitoring tools that only report threats without acting on them.

An IDS (Intrusion Detection System) can detect a rogue AP and generate an alert, but it cannot take active preventive or disabling action - that capability belongs exclusively to an IPS.