An individual rogue device can be contained by 1 to 4 managed APs which work in conjunction to mitigate the threat temporarily.
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan- controllers/112045-handling-rogue-cuwn-00.html