Question 710
At a utility control office in Raleigh, engineers report that an alert lists a potentially spoofed BSSID and the team needs to verify its physical or wired presence. The work affects monitoring dashboards and service desk access. Which post-change observation is the strongest acceptance evidence?
Explanation
Correct Answer
This observation tests the Wireless intrusion detection and rogue AP containment requirement at a utility control office in Raleigh. The expected result is that the identified rogue is confirmed by a reliable source and legitimate neighboring APs remain unaffected by the response. The necessary correction is to classify suspected rogue AP activity with authorized RF and wired evidence before taking proportional containment action; a saved configuration alone would not prove it is working. In this case, the observed fault is that an alert lists a potentially spoofed BSSID and the team needs to verify its physical or wired presence.
Incorrect Answers
At a utility control office in Raleigh, this would verify WPA3 Personal, PMF and secure client compatibility, not the failure reported in this scenario. The requested closure criterion instead concerns Wireless intrusion detection and rogue AP containment: the identified rogue is confirmed by a reliable source and legitimate neighboring APs remain unaffected by the response.
At a utility control office in Raleigh, the observation may be useful for a separate Role-based wireless segmentation and policy test, but it does not establish that an alert lists a potentially spoofed BSSID and the team needs to verify its physical or wired presence has been resolved. The relevant check is the Wireless intrusion detection and rogue AP containment outcome.
At a utility control office in Raleigh, this would verify WPA3 Enterprise and EAP-TLS certificate authentication, not the failure reported in this scenario. The requested closure criterion instead concerns Wireless intrusion detection and rogue AP containment: the identified rogue is confirmed by a reliable source and legitimate neighboring APs remain unaffected by the response.