200-301 Question 336

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Rule-Based Rogue States Classification Type • Internal—If the unknown access point is inside the network and poses no threat to WLAN security, you would manually configure it as Friendly, Internal. An example is the access points in your lab network. • External—If the unknown access point is outside the network and poses no threat to WLAN security, you would manually configure it as Friendly, External. An example is an access point that belongs to a neighboring coffee shop. • Alert—The unknown access point is moved to Alert if it is not in the neighbor list or in the user-configured friendly MAC list. Friendly link https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-2/configuration_guide/b_162_consolidated_3850_cg/b_162_consolidated_3850_cg_chapter_01100101.pdf

• Chose D1

  Must be more D than B

• Chose D1

  On a Cisco Wireless LAN Controller (WLC), when a rogue AP alarm is received and it is determined that the AP is indeed legitimate, you can stop the alarms for that particular AP by designating it as a 'Friendly' AP. This is done to acknowledge that the AP is known and not a security threat. The correct way to stop the alarms for the MAC address of a legitimate autonomous AP is: D. Set the AP Class Type to Friendly. By classifying the AP as 'Friendly,' the WLC recognizes the AP as a known and trusted device, and it will not trigger rogue AP alarms for that MAC address in the future. This is the standard way of handling such a scenario on a Cisco WLC.