Question 590
After a change at an airport terminal, the original incident was: A site writes a WxLAN rule denying one internal resource and incorrectly assumes all other internal traffic is therefore blocked. Which evidence BEST verifies that the specific failure has been corrected?
Explanation
Correct Answer
Test clients can reach only documented approved destinations, with other internal routes denied. This directly checks the outcome of the chosen remediation and confirms the problem was not merely hidden. The diagnostic issue was: a rule containing only denied resources does not imply a universal deny-all for other destinations.
Incorrect Answers
The client resolves names and reaches its intended service without opening prohibited networks. This would demonstrate a different scenario was fixed—an administrator adds a WxLAN allow rule for DNS but forgets the remaining application service required by the client—but does not validate recovery from a site writes a WxLAN rule denying one internal resource and incorrectly assumes all other internal traffic is therefore blocked.
6 GHz stations associate using the supported approved security exchange without deprecated WPA2-only operation. This would demonstrate a different scenario was fixed—a Wi-Fi 6E deployment specifies WPA2-only personal security for a proposed 6 GHz WLAN—but does not validate recovery from a site writes a WxLAN rule denying one internal resource and incorrectly assumes all other internal traffic is therefore blocked.
A representative contractor request matches the intended restrictive rule before any broad allowance. This would demonstrate a different scenario was fixed—a support team inserts a broad allow rule above a specific deny rule and observes contractors bypass the restricted-resource rule—but does not validate recovery from a site writes a WxLAN rule denying one internal resource and incorrectly assumes all other internal traffic is therefore blocked.