Examkin

Question

Difficulty: Very hardWireless Principles and Architecture

In a Cisco Wireless LAN Controller (WLC) architecture, Access Points (APs) can be configured in distinct operational modes to fulfill specialized roles. Match each AP operational mode on the left with its corresponding functional behavior on the right.

  • Monitor ModePerforms dedicated wireless intrusion prevention system (WIPS) monitoring, location tracking, and airborne rogue scanning without serving client traffic.
  • FlexConnect ModeEnables remote branch APs to locally switch user traffic and maintain WLAN availability during WAN outages to the central controller.
  • Sniffer ModeCaptures raw 802.11 wireless frames on a designated channel and streams packet traces directly to a network analyzer application.
  • Rogue Detector ModeCorrelates rogue device MAC addresses detected over the air with ARP and MAC address tables collected from connected wired switch ports.

Answer

Monitor Mode matches dedicated WIPS scanning and location tracking without client servicing; FlexConnect Mode matches local traffic switching and WAN fault tolerance for branch sites; Sniffer Mode matches raw 802.11 frame capture streaming for packet analysis; Rogue Detector Mode matches correlating airborne rogue MACs with wired infrastructure tables.
Each access point operational mode is matched directly to its primary role: Monitor mode provides non-client-serving WIPS scanning and location tracking; FlexConnect mode provides branch-office WAN fault tolerance and local traffic bridging; Sniffer mode provides remote 802.11 raw packet capture to a workstation; Rogue Detector mode links wireless rogue observations to wired network MAC tables.

Step-by-Step Solution

1
Identify the primary function of Monitor Mode.
Monitor mode APs refrain from serving wireless clients and focus exclusively on security scanning, rogue detection, and location tracking.
Monitor mode is tailored for continuous over-the-air environmental sensing.
2
Determine the operational characteristics of FlexConnect Mode.
FlexConnect allows local bridging of client traffic and local authentication fallback during WAN disruptions.
FlexConnect optimizes branch office deployments by preventing client data from requiring central CAPWAP encapsulation over limited WAN bandwidth.
3
Examine Sniffer Mode functionality.
Sniffer mode functions as a remote wireless packet probe, redirecting channel frame captures to a Wireshark workstation.
This allows deep-packet inspection on targeted RF channels without requiring specialized physical sniffer hardware on site.
4
Analyze Rogue Detector Mode.
Rogue Detector mode checks whether a rogue wireless device seen over the air is physically connected to the internal wired switch network.
It compares learned wired layer-2 MAC address tables with over-the-air rogue MAC lists.

Key Concept

Cisco Access Point Operational Modes
Estimated Time:2m 0s
Rate this question

Topics

Wireless Principles and Architecture

More questions from this topic