Question 250
After a change at a coastal resort, the original incident was: A WLAN is configured for WPA3-Personal but older field instruments can negotiate only WPA2-PSK. Which evidence BEST verifies that the specific failure has been corrected?
Explanation
Correct Answer
Supported modern devices use WPA3 and legacy devices function only on approved restricted access. This directly checks the outcome of the chosen remediation and confirms the problem was not merely hidden. The diagnostic issue was: legacy clients cannot negotiate security capabilities that their supplicant does not support.
Incorrect Answers
Negotiated associations use the required management-frame protections without unreviewed downgrade. This would demonstrate a different scenario was fixed—a network engineer disables protected management frames while deploying a WPA3 WLAN to improve compatibility—but does not validate recovery from a WLAN is configured for WPA3-Personal but older field instruments can negotiate only WPA2-PSK.
Only authorized CoA messages alter permitted client sessions and unauthorized senders are rejected. This would demonstrate a different scenario was fixed—a WLAN accepts an untrusted RADIUS Change-of-Authorization message to change a station's network access—but does not validate recovery from a WLAN is configured for WPA3-Personal but older field instruments can negotiate only WPA2-PSK.
The retired key fails while active authorized keys remain effective on the site. This would demonstrate a different scenario was fixed—a terminated contractor's MPSK still grants WLAN access months after their authorized visit ended—but does not validate recovery from a WLAN is configured for WPA3-Personal but older field instruments can negotiate only WPA2-PSK.