An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?
A.
Enable Security Association Teardown Protection and set the SA Query timeout to 10
B.
Enable MAC filtering and set the SA Query timeout to 10
C.
Enable 802.1x Layer 2 security and set me comeback timer to 10
D.
Enable the Protected Management Frame service and set the comeback timer to 10
Enable the Protected Management Frame service and set the comeback timer to 10. Protected Management Frames protect critical 802.11 management exchanges against spoofing and disruption, and the comeback timer controls how long a client must wait before retrying after an association request is rejected during the SA Query process. The requirement is not ordinary 802.1X authentication or MAC filtering; it is specifically about blocking spoofed association behavior and forcing a retry delay. Cisco CCNA 200-301 v1.1 Security Fundamentals expects engineers to distinguish wireless authentication from wireless management-frame protection. The WLC setting that addresses spoofed management traffic is PMF, not a generic Layer 2 authentication method. Setting the comeback timer to 10 matches the required wait value. Security Association Teardown Protection is related but does not best match the full configuration requirement stated in the question. Therefore, the correct selection is the option that enables Protected Management Frame service and sets the comeback timer to 10.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit