Question 420
Following an incident at a hospital campus, the WLAN team documented this condition: A healthcare IoT SSID is advertised at a neighboring public lobby because the WLAN template applies beyond its approved floor. Which ongoing safeguard MOST directly prevents recurrence?
Explanation
Correct Answer
Preview site targeting and walk-test sensitive SSIDs before approving templates. This repeatable safeguard addresses the mechanism—shared template targeting can create unintended RF access outside controlled spaces—and reduces the chance that the specific fault recurs.
Incorrect Answers
Include packet-path verification in corporate and guest WLAN templates. This protects against another issue—a large Mist WLAN sends guest traffic through local breakout when security policy requires central inspection—but is not the most direct prevention for a healthcare IoT SSID is advertised at a neighboring public lobby because the WLAN template applies beyond its approved floor.
Audit duplicate SSID objects and conflicting template scopes before WLAN rollout. This protects against another issue—a site reuses the same SSID name on two WLAN configurations with conflicting VLAN and security settings, confusing clients—but is not the most direct prevention for a healthcare IoT SSID is advertised at a neighboring public lobby because the WLAN template applies beyond its approved floor.
Record AP synchronization status in WLAN change completion criteria. This protects against another issue—a WLAN configuration appears correct in the portal but a powered-off AP has not received its updated broadcast settings—but is not the most direct prevention for a healthcare IoT SSID is advertised at a neighboring public lobby because the WLAN template applies beyond its approved floor.