Question 550
The WLAN team at a stadium complex has addressed this issue: A WxLAN role policy names the correct employee group but none of the clients match because the corresponding label has the wrong RADIUS attribute. Which measurable observation would MOST convincingly demonstrate successful remediation?
Explanation
Correct Answer
The intended client group matches the rule and receives the permitted resource list. This directly checks the outcome of the chosen remediation and confirms the problem was not merely hidden. The diagnostic issue was: mist WxLAN rules depend on accurate labels derived from identity or other matching attributes.
Incorrect Answers
Only authorized CoA messages alter permitted client sessions and unauthorized senders are rejected. This would demonstrate a different scenario was fixed—a WLAN accepts an untrusted RADIUS Change-of-Authorization message to change a station's network access—but does not validate recovery from a WxLAN role policy names the correct employee group but none of the clients match because the corresponding label has the wrong RADIUS attribute.
The identical PSK role receives the correct allowed site-specific VLAN at each location. This would demonstrate a different scenario was fixed—a company uses an MPSK user role for different VLANs at two sites, but the central policy pins both sites to the same VLAN—but does not validate recovery from a WxLAN role policy names the correct employee group but none of the clients match because the corresponding label has the wrong RADIUS attribute.
The client resolves names and reaches its intended service without opening prohibited networks. This would demonstrate a different scenario was fixed—an administrator adds a WxLAN allow rule for DNS but forgets the remaining application service required by the client—but does not validate recovery from a WxLAN role policy names the correct employee group but none of the clients match because the corresponding label has the wrong RADIUS attribute.