200-301 Question 253

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  iT's C

• 1

  Option C is Correct Answer SA Teardown Protection Components: Association Comeback Time: The AP adds cryptographic protection to de-authentication and dissociation frames. This prevents them from being spoofed in a Denial-of-Service (DOS) attack. SA-Query Procedure: Prevents spoofed association requests from disconnecting an already connected client. When an AP receives an association request, it verifies the legitimacy before allowing the client to connect.

• Chose D1

  You then need to specify the comeback timer and SA query timeout. The comeback timer specifies the time that an associated client must wait before the association can be tried again when first denied with a status code 30. SA query timeout specifies the amount of time the WLC waits for a response from the client for the query process. If there is no response from the client, its association is deleted from the controller. This is done as shown in the image. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/212576-configure-802-11w-management-frame-prote.html