Air Marshal has contained a malicious SSID. What are two effects on connectivity? (Choose two.)

When Cisco Meraki's Air Marshal contains a malicious SSID, it actively disrupts the rogue network's operation as part of its Wireless Intrusion Prevention System (WIPS) capabilities. The containing Meraki Access Points send 802.11 de-authentication frames to any clients currently connected to the malicious SSID, forcing them to disconnect. Simultaneously, the APs will also send de-authentication frames to any new clients attempting to associate with the malicious SSID, thereby preventing them from connecting. This dual action effectively neutralizes the threat by isolating the rogue SSID from all clients.

A. Containment actively disconnects clients; it does not permit them to stay connected.
B. A primary function of containment is to block all client connections, including any new attempts.
C. Traffic shaping is a bandwidth management policy, unrelated to the Layer 2 disconnection methods used by Air Marshal.

1. Cisco Meraki Documentation, "Air Marshal". In the "Containment" section, it states: "When an SSID is being contained, Meraki APs will send deauthentication packets to any clients connected to the SSID... to confuse any clients attempting to connect."

2. Cisco Meraki Documentation, "Wireless Intrusion Detection and Prevention (WIDS/WIPS)". The "Containment" section specifies: "When containment is initiated, the Meraki APs will begin to send deauthentication frames to clients that are associated or are attempting to associate to the SSID that is being contained."