Examkin

Question

Difficulty: MediumCisco Wireless Architectures and AP Modes

A network engineer needs to capture raw 802.11 wireless frames over the air on a specific channel to troubleshoot client connectivity failures in a manufacturing warehouse. The dedicated access point used for this operation must stop serving wireless clients and send all captured 802.11 traffic directly to a remote network analyzer tool such as Wireshark. Which Cisco Access Point mode must be configured to accomplish this objective?

  1. Sniffer modeAnswer
  2. B
    Monitor mode
  3. C
    Rogue Detector mode
  4. D
    FlexConnect mode

Answer

Sniffer mode is the dedicated AP mode used to capture raw 802.11 frames on a specified channel and forward them to a remote packet analyzer tool like Wireshark.
Sniffer mode dedicates the access point radio to listening on a specific channel, capturing raw 802.11 frames, and encapsulation-tunneling those captured frames to a designated IP address running a network packet analyzer such as Wireshark.

Step-by-Step Solution

1
Identify the primary operational requirement in the scenario.
The AP must capture raw 802.11 over-the-air frames on a dedicated channel and forward them to a packet analyzer (Wireshark) without servicing clients.
Troubleshooting complex 802.11 Layer 2 issues requires dedicated frame-level capture capabilities.
2
Evaluate Cisco AP modes against the required capability.
Sniffer mode turns the AP into a dedicated wireless packet capture device tied to a designated channel and target analyzer IP address.
Other modes either continue to service clients (FlexConnect, Local) or perform non-streaming security monitoring functions (Monitor, Rogue Detector).

Key Concept

Cisco Lightweight AP Operational Modes and Sniffer Mode Functionality
Rate this question

Topics

Cisco Wireless Architectures and AP Modes

More questions from this topic