A wireless engineer needs to deploy an access point whose sole purpose is to passively scan all channels for rogue devices, interference sources, and security threats. This AP must NOT serve any wireless clients or bridge any data traffic. Which AP mode should the engineer configure on the lightweight access point?