Question 470
After a change at a coastal resort, the original incident was: A location administrator disables all wireless alerts because one client repeatedly triggers minor RF warnings. Which evidence BEST verifies that the specific failure has been corrected?
Explanation
Correct Answer
Expected severe client and AP events continue to notify while justified low-impact noise is limited. This directly checks the outcome of the chosen remediation and confirms the problem was not merely hidden. The diagnostic issue was: blanket alert suppression removes visibility to unrelated serious outages.
Incorrect Answers
A transient AP-down event generates its alert while longer-running actionable conditions appear appropriately in Marvis. This would demonstrate a different scenario was fixed—a security team assumes a Marvis Action list is equivalent to every real-time port or AP up/down alert—but does not validate recovery from a location administrator disables all wireless alerts because one client repeatedly triggers minor RF warnings.
AP recovery and actual client service restoration are both documented before ticket closure. This would demonstrate a different scenario was fixed—an engineer sees an AP recovery alert after outage remediation and assumes every WLAN client has recovered too—but does not validate recovery from a location administrator disables all wireless alerts because one client repeatedly triggers minor RF warnings.
The time-linked channel interference event is identified and retry rates improve after correction. This would demonstrate a different scenario was fixed—a WLAN's aggregate retry rate rises after AP density increases, but no one inspects spectrum and radio event history—but does not validate recovery from a location administrator disables all wireless alerts because one client repeatedly triggers minor RF warnings.