Question 240
A newly deployed WLAN must allow only approved WPA2-Personal clients. The engineer sees that the controller security GUI is set to an open authentication mode. What should be corrected?
Explanation
Correct Answer
Open authentication does not verify possession of a shared WLAN key or provide the intended WPA2-PSK protected link. The WLAN security configuration must use the approved personal-key mode supported by its devices. Test a valid and invalid client credential to confirm that access policy is enforced.
Incorrect Answers
SSID hiding is not a cryptographic authentication mechanism and does not supply WPA2 confidentiality. Clients can still discover or infer hidden WLAN traffic.
The management web endpoint port does not govern client 802.11 authentication mode. WPA2-PSK must be configured on the WLAN service.
IP subnets are assigned after link association and do not replace the wireless key handshake. The issue is an open security policy.