Implementing Cisco Enterprise Wireless Networks (ENWLSI) — Question 295

A healthcare organization notices many rogue APs and is concerned about a honeypot attack. Which configuration must a wireless network engineer perform in
Cisco Prime Infrastructure to prevent these attacks most efficiently upon detection?

Answer options

• A. Set the auto containment level to 0 and select the Using Our SSID containment option.
• B. Set the manual containment level to 4 and select the Ad Hoc Rogue AP containment option.
• C. Set the auto containment level to 0 and select the Ad Hoc Rogue AP containment option.
• D. Set the auto containment level to 4 and select the Using Our SSID containment option.

Correct answer: D

Explanation

The correct answer is D because setting the auto containment level to 4 and selecting the Using Our SSID containment option provides a proactive approach to managing rogue APs, effectively isolating them from the network. Options A and C do not utilize a high enough auto containment level, which may leave the network vulnerable. Option B, while using manual containment, does not leverage the benefits of automatic detection and response that can be achieved with a higher auto containment level.