WIPS detects a rogue AP advertising the city’s employee SSID near c…

Question

WIPS detects a rogue AP advertising the city’s employee SSID near city hall. What response aligns with policy-driven containment?

Accepted Answer

Follow the approved WIPS playbook: classify the rogue, alert operators, and apply authorized containment or physical remediation. — A fake city SSID is a phishing billboard in RF. Trust the WIPS playbook—classify, alert, contain or yank the gear—not vibes from the NOC chair. Turning off every real AP or crowdsourcing on social media makes the incident worse.

Answer

Ignore the alert if signal strength is weak from the NOC desk.

Answer

Automatically shut down all legitimate employee APs citywide to be safe.

Answer

Post the rogue BSSID on social media and ask residents to locate it.

WIPS detects a rogue AP advertising the city’s employee SSID near city hall. What response aligns with policy-driven containment?

Short Explanation

Full Explanation