Question 720
At a government annex, an issue has been corrected: A guest authentication service is down and a configured bypass option silently authorizes new guests even though policy requires fail-closed access. Which repeatable control should the team add to prevent it from returning?
Explanation
Correct Answer
Exercise guest portal outage behavior in every sensitive WLAN security review. This repeatable safeguard addresses the mechanism—an exception-bypass option can trade availability for unauthorized guest admission—and reduces the chance that the specific fault recurs.
Incorrect Answers
Include terms and form-field checks in portal regression testing. This protects against another issue—a corporate-owned custom guest portal never displays the required acceptable-use terms after a template update—but is not the most direct prevention for a guest authentication service is down and a configured bypass option silently authorizes new guests even though policy requires fail-closed access.
Review portal and lifetime requirements before publishing public guest WLANs. This protects against another issue—a public guest SSID uses direct access with no portal even though the business requires time-limited guest authorization—but is not the most direct prevention for a guest authentication service is down and a configured bypass option silently authorizes new guests even though policy requires fail-closed access.
Review effective configuration diffs after introducing shared WLAN policy. This protects against another issue—a department assumes one AP's configured SSID guarantees every neighboring AP uses identical security despite site overrides—but is not the most direct prevention for a guest authentication service is down and a configured bypass option silently authorizes new guests even though policy requires fail-closed access.