Which additional factor can the embedded RRM software on Cisco WLC detect besides over-the-air metrics?
Short answer
A presence of rogue APs or malicious SSIDs
Question
Key Takeaways
RRM's off-channel scans are designed to detect rogue APs and malicious SSIDs, not full access control or vulnerability scanning.
This question tests the extra detection capabilities of Cisco WLC's built-in Radio Resource Management (RRM) beyond basic over-the-air metric monitoring.
Common mistake: Many candidates mistakenly select Option C, confusing RRM's radio monitoring function with WLAN authentication event logging features.
Expert Analysis
Correct Option Justification
- Option A is fully aligned with Cisco official specifications. The RRM embedded in Cisco WLC performs periodic off-channel scans, and the collected over-the-air packets are analyzed to identify the presence of rogue APs and malicious SSIDs, which is a defined built-in detection capability of RRM.
Incorrect Option Analysis
- Option B: Unauthorized wireless network access is handled by dedicated WIPS and access control policies, not the core detection scope of RRM.
- Option C: Repeated authentication attempts are logged and processed by WLAN security modules, not monitored by RRM's radio scanning mechanism.
- Option D: End-node vulnerability scanning belongs to dedicated security assessment tools, which is completely outside RRM's functional boundary.
Related Technical Principle
RRM on Cisco WLC mainly focuses on RF resource management, including dynamic channel allocation, transmit power control, coverage hole detection, and the over-the-air rogue device detection specified in official documents. Its off-channel scan only occupies less than 0.2% of the total AP working time, ensuring no obvious impact on normal WLAN service performance.
Official Reference
Cisco documentation: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html
This link opens the official vendor documentation in a new tab.
Exam Strategy
Locate the keyword 'RRM detection', exclude non-radio scanning security functions, and match the official defined rogue detection feature.
Community Votes
88% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 5 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 5
-
shefo1 👍 3 Answered AA is right , from cisco Detection - A Radio Resource Management (RRM) scan is used to detect the presence of rogue devices. https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html
-
RasoulZayer 👍 2 Answered Ahttps://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html
-
bhover 👍 1 Answered Ahttps://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#:~:text=Detection%20%2D%20A%20Radio,on%20their%20characteristics.
-
chiacche 👍 1Radio Resource Management : 1. rogue devices 2. rogue APs 3. malicious SSIDs
-
leehyoeun 👍 1 Answered Canswer is c
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All 350-401 Questions
Access 218 questions with complete answers and detailed explanations.
View Full 350-401 Practice Test →