Implementing Intrusion Protection for Cisco Enterprise Wireless Networks

Implementing Intrusion Protection for WLAN

Question

An engineer must implement intrusion protection on the WLAN.

The AP coverage is adequate and on-channel attacks are the primary concern.

The building is historic, which makes adding APs difficult.

Which AP mode and submode must be implemented?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

Intrusion Protection is an important aspect of securing a wireless network. In order to implement intrusion protection, an engineer can use Wireless Intrusion Prevention System (WIPS). WIPS is a type of wireless security mechanism that detects and prevents unauthorized access to the wireless network.

Based on the question, we know that the AP coverage is adequate and on-channel attacks are the primary concern. Therefore, we need to select an AP mode and submode that will enable us to implement WIPS while minimizing the number of APs needed to be added to the historic building.

Option A, which is local mode with no submode, is not a good option for implementing WIPS since local mode is typically used for providing wireless access to clients, not for monitoring and preventing wireless attacks.

Option B, which is monitor mode with WIPS submode, is a good option for implementing WIPS. Monitor mode is designed to capture wireless traffic for analysis and WIPS submode enables the AP to perform WIPS functions.

Option C, which is monitor mode with no submode, is not a good option since it does not provide WIPS functionality.

Option D, which is local mode with WIPS submode, is not a good option since local mode is primarily designed for providing wireless access to clients and not for performing WIPS functions.

Therefore, the correct answer is Option B: AP mode: monitor, AP submode: WIPS. This option enables the AP to capture wireless traffic and analyze it for any unauthorized access or attacks, and take necessary actions to prevent them.