Wireless Intrusion Prevention System (WIPS)

Correct Answer: Deauthentication attack prevention

Deauthentication attack prevention is specifically designed to detect and prevent attempts to disconnect devices from the Wi-Fi network. Disabling traffic encryption reduces security. Man-in-the-middle attack prevention does not address deauthentication attacks. Rogue access point detection helps protect against unauthorized access points, but not deauthentication attacks. Adjusting WIPS sensor sensitivity and enabling BYOD support are unrelated.

Correct Answer: Rogue access point detection

Rogue access point detection helps to identify unauthorized access attempts that may be used for data theft. Disabling encryption and enabling guest network access would reduce security. Reducing scanning frequency might allow unauthorized devices to go undetected. Geolocation features are used in conjunction with rogue access point detection to help locate these devices. MAC address filtering is a less comprehensive method compared to rogue access point detection.

Correct Answer: Automatic device classification

The 'automatic device classification' functionality should be enabled on the Wireless Intrusion Prevention System (WIPS) when your company introduces a bring-your-own-device (BYOD) policy. With this feature, the WIPS can correctly identify and classify each device that attempts to connect to the network, allow trusted devices, and restrict unknown or unauthorized devices. This is crucial in an environment where employees use their personal devices that can vary greatly in terms of makes, models, and operating systems. The other answers are not as applicable. 'SSID cloaking' is security through obscurity but it does not provide solid defense. 'Rogue access point containment' is a feature useful for managing unauthorized access points but does not specifically support a BYOD environment. 'False positive reduction' is important for overall WIPS efficiency, but it does not directly relate to handling BYOD policies.