AP Adjacent MAC - if an IAP sees a wired frame and a wireless frame within 8 positions in the MAC address (usually most cheap SOHO routers will use XX:XX:XX:XX:XX:01 for the wired and XX:X:XX:XX:XX:02-08 for the wireless). If it sees this, it will assume that it's wired in as part of it's detection algorithm, mark as a rogue, and contain it. Local security policy will dictate whether this is a good idea or not (ala good for physical secure enterprises, not goo for things like college dorms or open space where wired ports are not protected).
Suspect L3 Rogue - You can configure rules to mark something as a suspect rogue (like SNR seen at X, etc), and you can decide if you want to also contain Suspect Rogues or not (usually NOT a good idea).