Which two statements about background rogue scanning are correct? (Choose two.)
Which two statements about background rogue scanning are correct? (Choose two.)
A dedicated radio configured for background scanning can support the connection of wireless clients as it scans periodically while also functioning as a regular access point when needed, providing service to clients. Additionally, a dedicated radio set for background scanning can detect rogue devices on all other channels in its configured frequency band, as it scans all channels within the frequency band periodically to identify potential rogue devices.
B and D are more correct than the rest. Option A is definitely incorrect because, in dedicated monitor mode, the radio can not support the connection of wireless clients, and option C is not mandatory for rogue scanning.
I think all the answers are wrong. A dedicated radio per def cannot support clients and does active scanning and not backgroud scanning. A dedicated radio can suppress rougue AP but isn't doing a backgroud scan. Backgroud scanning is enabled if DARRP is implemneted but can be enabled without DARRP.
Option A and Option C. B is wrong because Background don't do suppress AP, but dedicated monitor is doing suppress AP.
Option A and Option C. Read pages 176 to 180 of the guide. Clearer impossible.
B & C - But Im not sure. Shitty Question. All of them are wrong to me.
A. YES - Background scannig support wifi clients. B. NO - Suppress rogue AP only in dedicated monitor mode C. YES - Background rogue scanning requires DARRP D. NO - Background scannig only detect on selected channel
D is correct background scanning spends scans each channel in the given radio's frequency for intervals of 20ms. C is incorrect. Enabling DARRP automatically enables background scanning, but Background scanning can also be enabled via a WIDS profile without DARRP enabled on the WTP profile
According to study guide pages 175-178, A & C are correct. A) is correct because putting one of the Radios in the AP in background scanning mode makes it work as a normal Radio that broadcasts SSIDs, but every 600 seconds performs scans for rogue APs. This have a bad detection rate and can make packets be dropped in the wireless network, but half-asses the monitoring requirement. The point is yeah, background scanning allows for clients to connect to the wireless. Using a dedicated radio does not, it performs foreground scans and that is all it does. C) is correct because, according to page 177, background scanning is automatic if DARRP is enabled. B) is not correct because if the radio is configured for background scanning, it can not suppress the rogue AP. Fortinet pretty much says they even can't detect rogue APs while in this mode, so supressing is out of the question. In page 180 it says "Supressing Rogue APs Requires dedicated monitor mode - Not possible with background scans" D is not correct because, as I understand according to page 177, it checks for all channels every 20 ms, not just for the ones it has configured.
The correct answer is B and C
Option A and Option C. Read pages 176 to 180 of the guide. Clearer impossible.
I think D is definitely correct. On page 177 in study guide, it says "By default, a scan period starts every 600 seconds, and each second aa different channel is monitored for 20 ms until all channels have been checked". Answer A could be correct if it means that the AP is still supporting wireless clients, since you have two radios. Page 176 in study guide says you can have one radio for scanning and one for normal use. But not sure if that is "background scanning". Answer C could be correct if it means that background scanning is automatically enabled when DARRP is enabled. But the answer does not remotely say that. I'd go with A and D.
B an D
Dedicated radios do not do background scanning: A, B and D should be wrong. One of them has to be right, however... Have to check C.
B and C
Answer is B and C, as per study guide - Background scanning require DARRP for roque detection. Dedicated monitor allows you to suppress APs with deauth frames.
C and D are correct. A is incorrect - dedicated radio doesn't support SSID broadcasting and wireless client connections; B is incorrect - background scanning doesn't do rouge AP suppression.