Question 300
At a medical clinic, an issue has been corrected: A network engineer disables protected management frames while deploying a WPA3 WLAN to improve compatibility. Which repeatable control should the team add to prevent it from returning?
Explanation
Correct Answer
Include PMF negotiation in security acceptance and legacy-client compatibility testing. This repeatable safeguard addresses the mechanism—wPA3 relies on management-frame protection requirements that cannot be discarded casually—and reduces the chance that the specific fault recurs.
Incorrect Answers
Check band-specific WPA3 and PMF requirements during 6 GHz migration. This protects against another issue—a Wi-Fi 6E deployment specifies WPA2-only personal security for a proposed 6 GHz WLAN—but is not the most direct prevention for a network engineer disables protected management frames while deploying a WPA3 WLAN to improve compatibility.
Validate enterprise authentication requirements before choosing WLAN security modes. This protects against another issue—a campus replaces a corporate 802.1X WLAN with one widely shared PSK because the new site is easier to deploy that way—but is not the most direct prevention for a network engineer disables protected management frames while deploying a WPA3 WLAN to improve compatibility.
Include packet-path verification in corporate and guest WLAN templates. This protects against another issue—a large Mist WLAN sends guest traffic through local breakout when security policy requires central inspection—but is not the most direct prevention for a network engineer disables protected management frames while deploying a WPA3 WLAN to improve compatibility.