Implementing Cisco Enterprise Wireless Networks (ENWLSI) — Question 134

After receiving an alert about a rogue AP, a network engineer logs into Cisco Prime Infrastructure and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines that the rogue device is actually inside the campus. The engineer determines that the rogue is a security threat and decides to stop if from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?

Answer options

• A. Go to the location where the rogue device is indicated to be and disable the power.
• B. Create an SSID similar to the rogue to disable clients from connecting to it.
• C. Update the status of the rogue in Cisco Prime Infrastructure to contained.
• D. Classify the rogue as malicious in Cisco Prime Infrastructure.

Correct answer: A

Explanation

Disabling the rogue AP by physically turning off its power is the fastest way to stop its broadcasting immediately. Creating a similar SSID or updating the status in Cisco Prime Infrastructure will take longer and may not provide immediate relief from the threat. Classifying the rogue as malicious is a necessary step for documentation but does not disable the device.