In a Cisco Wireless LAN Controller (WLC), rogue access points are APs detected in the RF environment that are not part of the managed wireless network. When other legitimate wireless networks exist in close proximity, such as in a multitenant building, their APs will be detected as rogues. The correct procedure is to classify these known, non-threatening APs as "friendly." This classification informs the system that the AP is a known entity and not a security threat, thereby preventing false positives and unnecessary security alerts while still tracking its presence.

A. adhoc: This classification is specifically for wireless devices operating in a peer-to-peer mode, not for infrastructure access points, which are described in the scenario.

C. malicious: This classification is reserved for APs that are identified as a direct security threat, such as an evil twin or an unauthorized AP connected to the corporate network.

D. unclassified: This is the default, initial state for any newly detected rogue AP. The question requires performing a classification, not leaving the AP in its default state.

1. Cisco Wireless LAN Controller Configuration Guide

Release 8.5

"Configuring Rogue Detection" chapter

"Information About Rogue Detection" section. This guide states

"A rogue AP is classified as one of the following: ... Friendly—The rogue AP is classified as a known AP." This directly supports classifying known

neighboring APs as friendly.

2. Enterprise Mobility 8.5 Design Guide

"Wireless Security" chapter

"Rogue AP Detection and Containment" section. This document clarifies the use case: "Rogues are classified as either friendly or malicious... A friendly rogue might be an AP in a neighboring office." This perfectly describes the multitenant building scenario.

3. Cisco AireOS 8.10 MR5 Configuration Guide

"Rogue Access Points" section. This guide outlines the classification states

confirming that "Friendly" is the appropriate state for a known AP that is not a threat

distinguishing it from "Malicious" and the initial "Unclassified" state. It notes

"When a rogue AP is declared

it is listed as an unclassified rogue. You can change the classification of the rogue AP..."