Question 830
After a change at an industrial warehouse, the original incident was: A terminated contractor's MPSK still grants WLAN access months after their authorized visit ended. Which evidence BEST verifies that the specific failure has been corrected?
Explanation
Correct Answer
The retired key fails while active authorized keys remain effective on the site. This directly checks the outcome of the chosen remediation and confirms the problem was not merely hidden. The diagnostic issue was: individual PSK credentials need lifecycle management beyond the common SSID's existence.
Incorrect Answers
Test clients obtain the expected address and complete allowed traffic through the tagged VLAN. This would demonstrate a different scenario was fixed—an SSID authenticates clients but its local bridge VLAN is absent from the AP's switchport trunk—but does not validate recovery from a terminated contractor's MPSK still grants WLAN access months after their authorized visit ended.
The exposed device key fails while unaffected device keys continue to work on the same SSID. This would demonstrate a different scenario was fixed—a warehouse shares one WPA2 password across all robots and cannot revoke one compromised unit without disrupting the fleet—but does not validate recovery from a terminated contractor's MPSK still grants WLAN access months after their authorized visit ended.
Devices authenticate using the intended lookup source and corresponding policy without fallback confusion. This would demonstrate a different scenario was fixed—a WLAN moves from a small local MPSK inventory to external RADIUS-backed PSK lookup, but the RADIUS service is unreachable—but does not validate recovery from a terminated contractor's MPSK still grants WLAN access months after their authorized visit ended.