Examkin

Question

Difficulty: MediumCisco Wireless Architectures and AP Modes

A network engineer is implementing security monitoring across an enterprise campus using a centralized Cisco Wireless LAN Controller (WLC) architecture. The security policy requires dedicated access points to continuously scan all 802.11 channels for rogue devices and radio frequency (RF) interference without broadcasting SSIDs, accepting client associations, or handling user data traffic. Which Cisco Lightweight Access Point (AP) mode should be configured on these access points?

  1. Monitor modeAnswer
  2. B
    Local mode
  3. C
    FlexConnect mode
  4. D
    Sniffer mode

Answer

Monitor mode
Monitor mode is specifically designed for dedicated wireless security monitoring and intrusion detection (WIPS). In this mode, the AP radio does not transmit client beacon signals or accept client associations. Instead, it systematically cycles through all configured channels to collect statistics, detect rogue access points, calculate location metrics, and monitor RF health.

Step-by-Step Solution

1
Identify the operational constraints specified in the scenario.
The AP must continuously scan channels, detect rogues, measure RF noise/interference, and not serve client connections or transmit beacons.
Security monitoring requires a dedicated RF sensor rather than a client-facing access point.
2
Evaluate Cisco Lightweight Access Point modes against these requirements.
In Monitor mode, the AP radio does not transmit to serve clients; it continuously cycles through all configured channels to gather location, WIPS, and rogue AP detection metrics.
This matches all security and functional requirements without interfering with regular client traffic.

Key Concept

Cisco Lightweight Access Point Operational Modes
Estimated Time:1m 0s
Rate this question

Topics

Cisco Wireless Architectures and AP Modes

More questions from this topic