Examkin

Question

Difficulty: EasyCisco Wireless Architectures and AP Modes

Match each Cisco Lightweight Access Point (AP) mode to its primary operational behavior.

  • FlexConnect ModeSwitches client data traffic locally at branch sites and maintains operations if WAN connection to the controller fails.
  • Monitor ModeFunctions as a dedicated sensor to perform rogue AP detection and wireless intrusion detection (WIDS) without serving clients.
  • Sniffer ModeCaptures raw 802.11 wireless frames on a specific channel and sends them to a network analyzer.
  • Rogue Detector ModeListens on wired network switch trunks to match wired ARP/MAC addresses with detected rogue wireless devices.

Answer

FlexConnect Mode matches with switching client traffic locally during WAN failure; Monitor Mode matches with serving as a dedicated WIDS and rogue detection sensor; Sniffer Mode matches with capturing raw 802.11 frames for network analysis; Rogue Detector Mode matches with listening to wired switch trunks for ARP/MAC correlation.
Each Cisco AP mode is designed for a specific operational capability. FlexConnect mode provides local data switching and WAN fault tolerance for remote offices. Monitor mode provides dedicated over-the-air WIDS and rogue scanning without serving client traffic. Sniffer mode captures wireless frames on specified channels and streams them to a packet analyzer. Rogue Detector mode connects to wired switch trunk ports to cross-reference rogue wireless MAC addresses with wired network traffic.

Step-by-Step Solution

1
Identify the role of FlexConnect Mode
FlexConnect handles local traffic switching for remote branch deployments, maintaining client connectivity during WAN connection drops.
It avoids sending branch client data traffic over CAPWAP across WAN links to a centralized controller.
2
Identify the role of Monitor Mode
Monitor mode APs do not broadcast SSIDs or connect clients; they act purely as monitoring sensors across RF channels.
This mode is dedicated to threat detection and location tracking.
3
Identify the role of Sniffer Mode
Sniffer mode captures over-the-air raw 802.11 frames on a designated channel.
The captured traffic is encapsulated and forwarded to specialized network packet analysis software like Wireshark.
4
Identify the role of Rogue Detector Mode
Rogue Detector mode checks wired broadcast ARP traffic on switch trunks to find rogue AP MACs.
It correlates rogue wireless BSSIDs reported by other APs with MAC addresses seen on the wired infrastructure.

Key Concept

Cisco Wireless Access Point Operational Modes
Rate this question

Topics

Cisco Wireless Architectures and AP Modes

More questions from this topic