Which additional factor can the embedded RRM software on Cisco WLC detect besides over-the-air metrics?

350-401 By islever Editorial Last updated

Short answer

A presence of rogue APs or malicious SSIDs

Question

The Radio Resource Management software that is embedded in the Cisco WLC acts as a manager to constantly monitor over-the-air metrics. Which other factor does the Radio Resource Management software detect?
  1. presence of rogue APs or malicious SSIDs Correct Answer
  2. unauthorized wireless network access
  3. repeated attempts to authenticate to a wireless network
  4. end-node vulnerabilities

Key Takeaways

RRM's off-channel scans are designed to detect rogue APs and malicious SSIDs, not full access control or vulnerability scanning.

This question tests the extra detection capabilities of Cisco WLC's built-in Radio Resource Management (RRM) beyond basic over-the-air metric monitoring.

Common mistake: Many candidates mistakenly select Option C, confusing RRM's radio monitoring function with WLAN authentication event logging features.

Expert Analysis

Correct Option Justification

  • Option A is fully aligned with Cisco official specifications. The RRM embedded in Cisco WLC performs periodic off-channel scans, and the collected over-the-air packets are analyzed to identify the presence of rogue APs and malicious SSIDs, which is a defined built-in detection capability of RRM.

Incorrect Option Analysis

  • Option B: Unauthorized wireless network access is handled by dedicated WIPS and access control policies, not the core detection scope of RRM.
  • Option C: Repeated authentication attempts are logged and processed by WLAN security modules, not monitored by RRM's radio scanning mechanism.
  • Option D: End-node vulnerability scanning belongs to dedicated security assessment tools, which is completely outside RRM's functional boundary.

Related Technical Principle

RRM on Cisco WLC mainly focuses on RF resource management, including dynamic channel allocation, transmit power control, coverage hole detection, and the over-the-air rogue device detection specified in official documents. Its off-channel scan only occupies less than 0.2% of the total AP working time, ensuring no obvious impact on normal WLAN service performance.

Official Reference

Cisco documentation: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

Locate the keyword 'RRM detection', exclude non-radio scanning security functions, and match the official defined rogue detection feature.

Community Votes

A
88%
C
12%

88% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. shefo1 👍 3 Answered A
    A is right , from cisco Detection - A Radio Resource Management (RRM) scan is used to detect the presence of rogue devices. https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html
  2. RasoulZayer 👍 2 Answered A
    https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html
  3. bhover 👍 1 Answered A
    https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#:~:text=Detection%20%2D%20A%20Radio,on%20their%20characteristics.
  4. chiacche 👍 1
    Radio Resource Management : 1. rogue devices 2. rogue APs 3. malicious SSIDs
  5. leehyoeun 👍 1 Answered C
    answer is c

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Practice All 350-401 Questions

Access 218 questions with complete answers and detailed explanations.

View Full 350-401 Practice Test →

← Back to 350-401 Study Guide