Question 280
Following an incident at a retail distribution center, the WLAN team documented this condition: An operator sees an AP disconnect event immediately after a scheduled PoE switch reboot but investigates only WLAN encryption. Which ongoing safeguard MOST directly prevents recurrence?
Explanation
Correct Answer
Correlate switch maintenance and AP availability logs during wireless incidents. This repeatable safeguard addresses the mechanism—wired power interruption can make wireless hardware appear to fail independently of security policy—and reduces the chance that the specific fault recurs.
Incorrect Answers
Document recurring incident frequency and choose adequate analysis retention windows. This protects against another issue—a temporary authentication failure repeats at the same hour daily but an investigator reviews only the last ten minutes—but is not the most direct prevention for an operator sees an AP disconnect event immediately after a scheduled PoE switch reboot but investigates only WLAN encryption.
Avoid broad manual power overrides without RF evidence and change review. This protects against another issue—a maintenance team manually sets maximum transmit power on every AP, overruling Mist RRM and creating excessive overlap—but is not the most direct prevention for an operator sees an AP disconnect event immediately after a scheduled PoE switch reboot but investigates only WLAN encryption.
Review radio-event history when retry trends change after deployment activity. This protects against another issue—a WLAN's aggregate retry rate rises after AP density increases, but no one inspects spectrum and radio event history—but is not the most direct prevention for an operator sees an AP disconnect event immediately after a scheduled PoE switch reboot but investigates only WLAN encryption.