Question 60
Following an incident at a retail distribution center, the WLAN team documented this condition: A wireless operations report equates an AP being online in Mist with every client being able to reach DHCP and DNS. Which ongoing safeguard MOST directly prevents recurrence?
Explanation
Correct Answer
Alert on user-facing connection stages in addition to AP inventory status. This repeatable safeguard addresses the mechanism—aP management health and client data-path service are different measurements—and reduces the chance that the specific fault recurs.
Incorrect Answers
Verify actual user label membership before activating group-specific policies. This protects against another issue—a WxLAN role policy names the correct employee group but none of the clients match because the corresponding label has the wrong RADIUS attribute—but is not the most direct prevention for a wireless operations report equates an AP being online in Mist with every client being able to reach DHCP and DNS.
Review post-association resource authorization for every new WLAN. This protects against another issue—a site installs an SSID with no documented user access policy and assumes basic encryption itself prevents access to sensitive services—but is not the most direct prevention for a wireless operations report equates an AP being online in Mist with every client being able to reach DHCP and DNS.
Test roaming through security and subnet boundaries, not only within one corridor. This protects against another issue—an employee laptop's WLAN disconnects whenever it crosses a security zone that requires a different layer-three address—but is not the most direct prevention for a wireless operations report equates an AP being online in Mist with every client being able to reach DHCP and DNS.