Which statement about Cisco Management Frame Protection is true?
A. It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point.
B. It detects spoofed MAC addresses.
C. It identifies potential RF jamming attacks.
D. It protects against frame and device spoofing.
Management Frame Protection (MFP) is a wireless feature that increases the security of the management frames. Its wireless standard is IEEE 802.11w-2009 or Protected Management Frames (PMF) which aims to provide data confidentiality of the management frames and protect wireless connectivity. This feature only works if both the access point and the client have MFP enabled.
There are certain restrictions for some wireless clients to communicate with MFP-enabled infrastructure devices. MFP adds a long set of information elements to each probe request or SSID beacon. Some wireless clients such as Personal Digital Assistants (PDAs), smartphones, barcode scanners, and so forth have limited memory and CPU so you are not able to process these requests or beacons. As a result, you fail to see the Service Set Identifier (SSID) entirely, or you are not able to associate with these infrastructure devices due to mismatch of SSID capabilities. This issue is not specific to MFP. This also occurs with any SSID that has multiple information elements (IEs). It is always recommended to test MFP-enabled SSIDs on the environment with all your available client types before you deploy it in real time.