Question 490
The WLAN team at a retail distribution center has addressed this issue: A large Mist WLAN sends guest traffic through local breakout when security policy requires central inspection. Which measurable observation would MOST convincingly demonstrate successful remediation?
Explanation
Correct Answer
Guest packets traverse the central enforcement path and fail to reach prohibited internal resources. This directly checks the outcome of the chosen remediation and confirms the problem was not merely hidden. The diagnostic issue was: local bridging and tunneled forwarding meet different policy boundaries.
Incorrect Answers
Authorized devices connect with the new key and the retired key is rejected across target APs. This would demonstrate a different scenario was fixed—a WPA2 WLAN's local PSK is rotated in the Mist portal but field devices still authenticate with an old secret on disconnected APs—but does not validate recovery from a large Mist WLAN sends guest traffic through local breakout when security policy requires central inspection.
An unapproved guest reaches only the portal dependencies, signs in and then gains intended limited access. This would demonstrate a different scenario was fixed—a business uses an externally hosted guest sign-in site, but new WLAN clients cannot reach its login domain before authorization—but does not validate recovery from a large Mist WLAN sends guest traffic through local breakout when security policy requires central inspection.
Test clients obtain the expected address and complete allowed traffic through the tagged VLAN. This would demonstrate a different scenario was fixed—an SSID authenticates clients but its local bridge VLAN is absent from the AP's switchport trunk—but does not validate recovery from a large Mist WLAN sends guest traffic through local breakout when security policy requires central inspection.