Cisco Exam 300-425 Topic 2 Question 40 Discussion

During a wireless design all APs are mapped to designated controllers in case of a failure. The controllers are located in the same data center but in different racks. An AP failed over to a controller that was not defined on its High Availability tab. The customer does not want the AP to move back to its defined Cisco WLCs until they manually intervene. What needs to be addressed in the design?